CVE-2006-7021

2007-02-1502:00:00

mitre

www.cve.org

AI Score

7.5

Confidence

High

EPSS

0.051

Percentile

93.0%

JSON

PHP remote file inclusion vulnerability in manager/tools/link/dbinstall.php in Plume CMS 1.1.3 allows remote attackers to execute arbitrary PHP code via a URL in the _PX_config[manager_path] parameter.

References

www.hamid.ir/security/plume.txt

www.securiteam.com/unixfocus/5KP031FJ5A.html

www.securityfocus.com/bid/18750

www.securitytracker.com/id?1016415

exchange.xforce.ibmcloud.com/vulnerabilities/27535