PHP remote file include vulnerability in forum.php in oaBoard 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the inc_stat parameter, a different vulnerability than CVE-2006-0076. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
References
Link | Resource |
---|---|
http://secunia.com/advisories/17373 | Vendor Advisory |
http://www.vupen.com/english/advisories/2006/0028 | Vendor Advisory |
Configurations
Information
Published : 2006-01-05 03:03
Updated : 2011-08-22 21:00
NVD link : CVE-2006-0094
Mitre link : CVE-2006-0094
JSON object : View
CWE
CWE-94
Improper Control of Generation of Code ('Code Injection')
Products Affected
oaboard
- oaboard