CVE-2006-6043

2006-11-22T00:07:00
ID CVE-2006-6043
Type cve
Reporter cve@mitre.org
Modified 2017-07-20T01:34:00

Description

PHP file inclusion vulnerability in loginform-inc.php in Oliver (formerly Webshare) 1.2.2 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a UNC share pathname or a local file pathname in the conf[motdfile] parameter, which is accessed by the file_exists function. Successful exploitation requires that "register_globals" is enabled.