Skip to main content
← All vulnerabilities
CVE-2006-2834

PHP remote file inclusion vulnerability in includes/common.php in gnopaste 0.5.3 and earlier allows remote attackers to execute arbitrary PH

Published
Last modified
published
Not listed in CISA KEV
1 on Exploit-DB

Summary

PHP remote file inclusion vulnerability in includes/common.php in gnopaste 0.5.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the root_path parameter.

Timeline

  1. Public exploit on Exploit-DB

    EDB-1851

  2. CVE published
  3. Record last updated

Affected versions

  • n/a n/a

    Version range not reported

References 7

exchange.xforce.ibmcloud.com

sourceforge.net

Exploit-DB

vupen.com

securitytracker.com

securityfocus.com