RCE in Cuttlefish Leicestershire Communityportals
CVE-2006-7146
PHP remote file inclusion vulnerability in bug.php in Leicestershire communityPortals 1.0 build 20051018 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the cp_root_path parameter, a different vector than CVE-2006-5280. NOTE: CVE disputes this issue, since bug.php is not in communityPortals source distributions
Vulnerability class: RCE (Remote Code Execution)
EPSS: 0.023 (81.1th percentile) — read the EPSS interpretation.
Affected products
- Cuttlefish Leicestershire_communityportals
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (Exploit, vdb-entry, x_refsource_BID)
- cve@mitre.org (Exploit, x_refsource_SREASON, third-party-advisory)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)