CVE-2006-3323

HOCH 7.5CVE-2006-3323 · Published 30/06/2006 · updated 16/06/2026

Kurz gesagt

CVE-2006-3323 ist eine Schwachstelle (HOCH (CVSS 7.5)) in mf piadas (mastersfusion).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 7.8%, höher als bei 94.7% aller Schwachstellen.
Noch keine gepatchte Version bekannt: Herstellerhinweise unter Referenzen verfolgen.

Package	Affected versions	Patched versions
mf piadas mastersfusion	`= 1.0`	No fix yet

Description

PHP remote file inclusion vulnerability in admin/admin.php in MF Piadas 1.0 allows remote attackers to execute arbitrary PHP code via the page parameter. NOTE: the same vector can be used for cross-site scripting, but CVE analysis suggests that this is resultant from file inclusion of HTML or script.

References

kurdishsecurity.blogspot.com/2006/06/kurdish-security-10-mf-piadas-10.html · Exploit
secunia.com/advisories/20847 · Vendor Advisory
securityreason.com/securityalert/1172
osvdb.org/26867
osvdb.org/26868
securityfocus.com/archive/1/438496/100/0/threaded
securityfocus.com/bid/18676 · Exploit
securityfocus.com/bid/18679 · Exploit
vupen.com/english/advisories/2006/2567
exchange.xforce.ibmcloud.com/vulnerabilities/27412
exchange.xforce.ibmcloud.com/vulnerabilities/27415

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free