CVE-2006-5021

The redgun RedBLoG 0.5 application is vulnerable to multiple PHP remote file inclusion (RFI) flaws. These vulnerabilities stem from the application's failure to sufficiently sanitize user-supplied data in specific parameters. Specifically, remote attackers can execute arbitrary PHP code by provid...

PT-2006-5762 · Redgun · Redblog

Name of the Vulnerable Software and Affected Versions: redgun RedBLoG version 0.5 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in several parameters, including the root parameter in "imgen.php", and the root path parameter in "admin/config.php",...

CVE-2006-5021: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in redgun RedBLoG 0.5 allow remote attackers to execute arbitrary PHP code via a URL in 1 the root parameter in imgen.php, and the rootpath parameter in 2 admin/config.php, 3 common.php, and 4 admin/index.php. NOTE: the provenance of this...