CVE-2006-5308

HOCH 7.5CVE-2006-5308 · Published 17/10/2006 · updated 16/06/2026

Kurz gesagt

CVE-2006-5308 ist eine Schwachstelle (HOCH (CVSS 7.5)) in open conference systems (open conference systems).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 6.8%, höher als bei 94.0% aller Schwachstellen.
Noch keine gepatchte Version bekannt: Herstellerhinweise unter Referenzen verfolgen.

Package	Affected versions	Patched versions
open conference systems open_conference_systems	`≤ 1.1.5`	No fix yet

Description

Multiple PHP remote file inclusion vulnerabilities in Open Conference Systems (OCS) before 1.1.6 allow remote attackers to execute arbitrary PHP code via a URL in the fullpath parameter in (1) include/theme.inc.php or (2) include/footer.inc.php.

References

isc.sans.org/diary.php
pkp.sfu.ca/ocs_download
pkp.sfu.ca/bugzilla/attachment.cgi
pkp.sfu.ca/bugzilla/show_bug.cgi
secunia.com/advisories/22412 · Patch
securitytracker.com/id · Exploit
securityfocus.com/archive/1/448548/100/0/threaded
securityfocus.com/bid/20567 · Patch
vupen.com/english/advisories/2006/4041
exchange.xforce.ibmcloud.com/vulnerabilities/29517
exploit-db.com/exploits/2536

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free