CVE-2006-5076
HIGH 7.5EPSS 3.6%
Multiple PHP remote file inclusion vulnerabilities in OpenConcept Back-End 0.4.5 allow remote attackers to execute arbitrary PHP code via a URL in the includes_path parameter in (1) admin/index.php, (2) Facts.php, or (3) search.php.
- CVSS v2.0
- 7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P - EPSS
- 3.59% chance of exploitation in the next 30 days, 89th percentile
- Published
- 2006-09-29
- Updated
- 2024-08-07
Proof-of-concept exploits (2)
- http://www.securityfocus.com/archive/1/448776/100/0/threaded
- http://www.securityfocus.com/archive/1/450031/100/200/threaded
ExploitDB entries (3)
- https://www.exploit-db.com/exploits/28676
- https://www.exploit-db.com/exploits/28675
- https://www.exploit-db.com/exploits/28674