CVE-2006-5911
Multiple PHP remote file inclusion vulnerabilities in Campware Campsite before 2.6.2 allow remote attackers to execute arbitrary PHP code via a URL in the g_documentRoot parameter to (1) Alias.php, (2) Article.php, (3) ArticleAttachment.php, (4) ArticleComment.php, (5) ArticleData.php, (6) ArticleImage.php, (7) ArticleIndex.php, (8) ArticlePublish.php, (9) ArticleTopic.php, (10) ArticleType.php, (11) ArticleTypeField.php, (12) Attachment.php, (13) Country.php, (14) DatabaseObject.php, (15) Event.php, (16) IPAccess.php, (17) Image.php, (18) Issue.php, (19) IssuePublish.php, (20) Language.php, (21) Log.php, (22) LoginAttempts.php, (23) Publication.php, (24) Section.php, (25) ShortURL.php, (26) Subscription.php, (27) SubscriptionDefaultTime.php, (28) SubscriptionSection.php, (29) SystemPref.php, (30) Template.php, (31) TimeUnit.php, (32) Topic.php, (33) UrlType.php, (34) User.php, and (35) UserType.php in implementation/management/classes/; (36) configuration.php and (37) db_connect.php in implementation/management/; and (38) LocalizerConfig.php and (39) LocalizerLanguage.php in implementation/management/priv/localizer/.
- CVSS v2.0 NVD
- 7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P - EPSS
- 7.45% chance of exploitation in the next 30 days, 94th percentile
- Published
- 2006-11-15
- Updated
- 2024-08-07
ExploitDB entries (8)
- https://www.exploit-db.com/exploits/30006
- https://www.exploit-db.com/exploits/30005
- https://www.exploit-db.com/exploits/30004
- https://www.exploit-db.com/exploits/30003
- https://www.exploit-db.com/exploits/29999
- https://www.exploit-db.com/exploits/29998
- https://www.exploit-db.com/exploits/29997
- https://www.exploit-db.com/exploits/29996
Security advisories
- http://code.campware.org/projects/campsite/changeset/6057
- http://code.campware.org/projects/campsite/changeset/6058
- http://sourceforge.net/project/shownotes.php?release_id=459574&group_id=66936
- http://www.securityfocus.com/bid/23874