CVE-2006-6612

2006-12-1802:00:00

mitre

www.cve.org

AI Score

7.5

Confidence

High

EPSS

0.086

Percentile

94.5%

JSON

PHP remote file inclusion vulnerability in basic.inc.php in PhpMyCms 0.3 allows remote attackers to execute arbitrary PHP code via a URL in the basepath_start parameter.

References

www.attrition.org/pipermail/vim/2006-December/001185.html

www.securityfocus.com/bid/21583

www.vupen.com/english/advisories/2006/5031

exchange.xforce.ibmcloud.com/vulnerabilities/30893

www.exploit-db.com/exploits/2927