CVE-2006-6018

Summary: For Jim Plush My-BIC 0.6.5, multiple CVEs exist describing PHP remote file inclusion (RFI) vectors in mybic_server.php. CVE-2006-6018 cites an RFI via INC_PATH (a claim disputed by CVE and researchers because INC_PATH is a constant). CVE-2006-5089 cites an RFI via the file parameter (wit...

CVE-2006-6018

PHP remote file inclusion vulnerability in mybicserver.php in Jim Plush My-BIC 0.6.5 allows remote attackers to execute arbitrary PHP code via a URL in the INCPATH parameter, a different vector than CVE-2006-5089. NOTE: this issue is disputed by CVE and third party researchers because INCPATH is ...