PHP Remote File Inclusion Vulnerability in Tucows Client Code Suite
CVE-2006-6551

Currently unrated

Key Information:

Vendor

Tucows

Status
Client Code Suite
Vendor
CVE Published:
14 December 2006

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2006-6551?

A PHP remote file inclusion vulnerability exists in the Tucows Client Code Suite (CCS) that allows attackers to exploit the _ENV[TCA_HOME] parameter. This vulnerability can enable malicious actors to execute arbitrary PHP code remotely. It affects versions 1.2.1015 and earlier, making it crucial for users of this software to be aware of potential security risks and apply necessary patches or updates to mitigate exploitation.

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2006-6551 - Proof of Concept

References

https://www.exploit-db.com/exploits/2896
exploitx_refsource_EXPLOIT-DB
https://exchange.xforce.ibmcloud.com/vulnerabilities/30789
vdb-entryx_refsource_XF

EPSS Score

5% chance of being exploited in the next 30 days.

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.