Skip to main content
← All vulnerabilities
CVE-2006-3363

PHP remote file inclusion vulnerability in index.php in the Glossaire module 1.7 for Xoops allows remote attackers to execute arbitrary PHP

Published
Last modified
published
Not listed in CISA KEV
1 on Exploit-DB

Summary

PHP remote file inclusion vulnerability in index.php in the Glossaire module 1.7 for Xoops allows remote attackers to execute arbitrary PHP code via a URL in the pa parameter.

Timeline

  1. Public exploit on Exploit-DB

    EDB-28159

  2. CVE published
  3. Record last updated

Affected versions

  • n/a n/a

    Version range not reported

References 6

securityfocus.com

securityreason.com

exchange.xforce.ibmcloud.com

securitytracker.com

Exploit-DB