Description

PHP remote file inclusion vulnerability in templates/tmpl_dfl/scripts/index.php in BoonEx Dolphin 5.2 allows remote attackers to execute arbitrary PHP code via a URL in the dir[inc] parameter. NOTE: it is possible that this issue overlaps CVE-2006-4189.

Remediation

References

CVE-2006-5410

Related Vulnerabilities

Apache HTTP Server Other Vulnerability (CVE-2000-1204)

WordPress Plugin Ultimate Member-User Profile, Registration, Login, Member Directory, Content Restriction & Membership Cross-Site Scripting (2.0.25)

MySQL CVE-2022-21355 Vulnerability (CVE-2022-21355)

phpList CVE-2023-27576 Vulnerability (CVE-2023-27576)

Nginx Integer Overflow or Wraparound Vulnerability (CVE-2017-7529)

Severity

Medium

Classification

CVE-2006-5410

Tags

Missing Update Known Vulnerabilities