Vulnerability in Robin De Graff Somery

CVE-2006-7006

PHP remote file inclusion vulnerability in upload/admin/team.php in Robin de Graff Somery 0.4.4 allows remote attackers to execute arbitrary PHP code via a URL in the checkauth parameter. NOTE: CVE disputes this vulnerability because the checkauth parameter is only used in conditionals

EPSS: 0.019 (77.6th percentile) — read the EPSS interpretation.

Affected products

Robin_de_graff Somery — versions 0.4.4
N/a — versions n/a

References

cve@mitre.org (URL Repurposed, Exploit, x_refsource_MISC)
cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
cve@mitre.org (x_refsource_MISC)
cve@mitre.org (mailing-list, x_refsource_VIM)
cve@mitre.org (x_refsource_OSVDB, vdb-entry)
cve@mitre.org (vdb-entry, x_refsource_BID)