7.5
CVSSv2

CVE-2006-5249

Published: 12/10/2006 Updated: 17/10/2018
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 755
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

PHP remote file inclusion vulnerability in tagmin/delTagUser.php in TagIt! Tagboard 2.1.B Build 2 (tagit2b) allows remote malicious users to execute arbitrary PHP code via a URL in the configpath parameter.

Vulnerable Product Search on Vulmon Subscribe to Product

tagit tagboard 2.1.b_build_2

Exploits

source: wwwsecurityfocuscom/bid/20451/info Tagit2b is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied input data An attacker can exploit this issue to have malicious PHP code execute in the context of the webserver process This may allow the attacker to compromise the application and ...