6.8
CVSSv2

CVE-2006-7194

Published: 18/04/2007 Updated: 11/10/2017
CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6
VMScore: 685
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Vulnerability Summary

PHP remote file inclusion vulnerability in modules/Mysqlfinder/MysqlfinderAdmin.php in Agora 1.4 RC1, when register_globals is enabled, allows remote malicious users to execute arbitrary PHP code via a URL in the _SESSION[PATH_COMPOSANT] parameter.

Vulnerable Product Search on Vulmon Subscribe to Product

republique francaise agora 1.4_rc1

Exploits

____________________ ___ ___ ________ \_ _____/\_ ___ \ / | \\_____ \ | __)_ / \ \// ~ \/ | \ | \\ \___\ Y / | \ /_______ / \______ /\___|_ /\_______ / \/ \/ \/ \/ ORID ECHO_ADV_59$2006 --------------------------------------------- ...