CVE-2006-0940

Multiple direct static code injection vulnerabilities in savesettings.php in ShoutLIVE 1.1.0 allow remote attackers to execute arbitrary PHP code via variables that are written to settings.php.

CVSS v2.0

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

3.35% chance of exploitation in the next 30 days, 88th percentile

Published

2006-03-01

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/1590

References

• CVE Record
• NVD entry

Related

• CVE-2006-0939
• CVE-2006-0942
• CVE-2006-0936
• CVE-2006-0943
• CVE-2006-0933
• CVE-2006-0944