CVE-2006-3537

2006-07-1221:00:00

mitre

www.cve.org

7.5 High

AI Score

Confidence

Low

0.086 Low

EPSS

Percentile

94.5%

JSON

PHP remote file inclusion vulnerability in index.php in Randshop before 1.2 allows remote attackers to execute arbitrary PHP code via the dateiPfad parameter, a different vector than CVE-2006-3375.

References

securityreason.com/securityalert/1213

www.securityfocus.com/archive/1/439750/100/0/threaded

www.securityfocus.com/bid/18865

www.vupen.com/english/advisories/2006/2740

exchange.xforce.ibmcloud.com/vulnerabilities/27540

exchange.xforce.ibmcloud.com/vulnerabilities/27541