CVE-2006-5899

The CVE-2006-5899 issue is a PHP remote file inclusion in @cid stats 2.3 via the repertoire parameter of install.php3, enabling remote code execution. The root cause is the presence of install.php3 that can be invoked with a URL parameter to include arbitrary PHP code. The notes in sources indica...

PT-2006-6566 · @Cid · @Cid Stats

Name of the Vulnerable Software and Affected Versions: @cid stats version 2.3 Description: A remote file inclusion issue in install.php3 allows remote attackers to execute arbitrary PHP code via a URL in the repertoire parameter. Note that this issue has been disputed by a third party, who claims...

@cid stats v2.3 File Include

@cid stats v2.3 File Include Source Code: http://www.comscripts.com/jump.php?action=script&id=1115 Vulnerable Code: install.php3 In Line 41 : require"'.$repertoire."/".'statsfonctions.php3 Exploit : http://www.VicTim.com/@/install.php3?repertoire=ShElL.txt? Discoverd By : Mahmoodali Special...