PHP remote file inclusion vulnerability in centre.php in Site News (site_news) 2.00, and possibly earlier, allows remote attackers to execute arbitrary PHP code via a URL in the page parameter. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.
References
Link | Resource |
---|---|
http://www.securityfocus.com/bid/21269 | Exploit |
http://secunia.com/advisories/23082 | Vendor Advisory |
http://www.vupen.com/english/advisories/2006/4685 |
Configurations
Information
Published : 2006-11-30 17:28
Updated : 2011-03-07 18:45
NVD link : CVE-2006-6212
Mitre link : CVE-2006-6212
JSON object : View
CWE
CWE-94
Improper Control of Generation of Code ('Code Injection')
Products Affected
webwiz
- site_news