CVE-2006-2121

2006-05-0122:00:00

mitre

www.cve.org

7.7 High

AI Score

Confidence

Low

0.058 Low

EPSS

Percentile

93.4%

JSON

PHP remote file include vulnerability in admin/config_settings.tpl.php in I-RATER Platinum allows remote attackers to execute arbitrary code via a URL in the include_path parameter. NOTE: this is a different vector, and possibly a different vulnerability, than CVE-2006-1929.

References

securityreason.com/securityalert/824

www.securityfocus.com/archive/1/432404/100/0/threaded

www.securityfocus.com/archive/1/432596/100/0/threaded

www.securityfocus.com/bid/17731

exchange.xforce.ibmcloud.com/vulnerabilities/26203