Vulnerability in Keith Reichley Dotwidget For Articles
CVE-2006-7052
Multiple PHP remote file inclusion vulnerabilities in DotWidget For Articles (dotwidgeta) 0.2 allow remote attackers to execute arbitrary code via a URL in the (1) file_path parameter to (a) index.php, (b) showcatpicks.php, and (c) showarticle.php; and the (2) admin_header_file and (3) admin_footer_file parameters to (d) admin/authors.php, (e) admin/index.php, (f) admin/categories.php, (g) admin/editconfig.php, and (h) admin/articles.php.
Published · last modified .
CVSS v2 metric
CVSS v2 base score 10.0 (High). Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C. This CVE predates CVSS v3 and has no v3 score from NVD.
EPSS exploit prediction
EPSS: 0.064 (93.4th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 93rd percentile — 93.4% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.064 · newest: 0.064 · change: +0.000
Affected products
- Keith Reichley Dotwidget For Articles — versions 0.2
References
- www.securityfocus.com/archive/1/437483 (mailing-list, Exploit)
- securityreason.com/securityalert/2308 (third-party-advisory)
- www.securityfocus.com/bid/18479 (Exploit, vdb-entry)
- exchange.xforce.ibmcloud.com/vulnerabilities/27327 (vdb-entry)