CVE-2006-2122

PHP remote file inclusion vulnerability in index.php in CoolMenus allows remote attackers to execute arbitrary code via a URL in the page parameter. NOTE: the original report for this issue is probably erroneous, since CoolMenus does not appear to be written in PHP.

CVSS v2.0

6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

4.30% chance of exploitation in the next 30 days, 90th percentile

Published

2006-05-01

Updated

2024-08-07

Proof-of-concept exploits (2)

• http://www.securityfocus.com/archive/1/432630/100/0/threaded
• http://www.securityfocus.com/archive/1/432597/100/0/threaded

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/27768

References

• CVE Record
• NVD entry

Related

• CVE-2006-2121
• CVE-2006-2124
• CVE-2006-2119
• CVE-2006-2126
• CVE-2006-2116
• CVE-2006-2127