RCE in Logahead Unu
CVE-2006-6887
Unrestricted file upload vulnerability in logahead UNU 1.0 allows remote attackers to upload and execute arbitrary PHP code via unspecified vectors related to plugins/widged/_widged.php (aka the WidgEd plugin), a different vulnerability than CVE-2006-6783. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.
Vulnerability class: RCE (Remote Code Execution)
EPSS: 0.016 (73.7th percentile) — read the EPSS interpretation.
Affected products
- Logahead Logahead_unu — versions 1.0
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_SECUNIA, third-party-advisory)