Multiple PHP Remote File Inclusion Vulnerabilities in Content*Builder by ContentBuilder
CVE-2006-3173

Currently unrated

Key Information:

Vendor: Content\*builder
Status: Content\*builder
Vendor: CVE Published:; 23 June 2006

🔔 Create Content\*builder Vulnerability Alert

What is CVE-2006-3173?

Content*Builder version 0.7.5 is susceptible to multiple PHP remote file inclusion vulnerabilities. These vulnerabilities allow remote attackers to exploit the system and execute arbitrary PHP code by manipulating specific parameters in the URL. The affected parameters include the path[cb] parameter in libraries/comment/postComment.php and modules/poll/poll.php, the rel parameter in modules/archive/overview.inc.php, and the actualModuleDir parameter in modules/forum/showThread.inc.php. Successful exploitation of these vulnerabilities can lead to unauthorized access and control of the affected server.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/27044

vdb-entryx_refsource_XF

http://www.securityfocus.com/bid/25914

vdb-entryx_refsource_BID

http://www.securityfocus.com/archive/1/481435/100/0/threaded

mailing-listx_refsource_BUGTRAQ

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jun 23, 2006
Vulnerability Reserved
Jun 22, 2006

CVE-2006-3173 Data

JSON