7.5
CVSSv2

CVE-2006-3982

Published: 05/08/2006 Updated: 17/10/2018
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 755
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

PHP remote file inclusion vulnerability in quickie.php in Knusperleicht Quickie, probably 0.2, allows remote malicious users to execute arbitrary PHP code via a URL in the QUICK_PATH parameter.

Vulnerable Product Search on Vulmon Subscribe to Product

knusperleicht quickie 0.2

Exploits

source: wwwsecurityfocuscom/bid/19271/info Quickie is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input An attacker can exploit this issue to include arbitrary remote files containing malicious PHP code and execute it in the context of the webserver process This may allow the attacke ...