Skip to main content
← All vulnerabilities
CVE-2006-3917

PHP remote file inclusion vulnerability in inc/gabarits.php in R.

Published
Last modified
published
Not listed in CISA KEV
1 on Exploit-DB

Summary

PHP remote file inclusion vulnerability in inc/gabarits.php in R. Corson PHP Forge 3 beta 2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the cfg_racine parameter.

Timeline

  1. Public exploit on Exploit-DB

    EDB-2058

  2. CVE published
  3. Record last updated

Affected versions

  • n/a n/a

    Version range not reported

References 4

vupen.com

Exploit-DB

securityfocus.com

exchange.xforce.ibmcloud.com