CVE-2006-6887

2022-10-0316:21:23

mitre

www.cve.org

logahead unu

file upload

remote execution

arbitrary php code

widged plugin

cve-2006-6887

7.3 High

AI Score

Confidence

Low

0.128 Low

EPSS

Percentile

95.5%

JSON

Unrestricted file upload vulnerability in logahead UNU 1.0 allows remote attackers to upload and execute arbitrary PHP code via unspecified vectors related to plugins/widged/_widged.php (aka the WidgEd plugin), a different vulnerability than CVE-2006-6783. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.

References

secunia.com/advisories/23470