CVE-2006-3966

ALTO 7.5CVE-2006-3966 · Published 01/08/2006 · updated 16/06/2026

In breve

CVE-2006-3966 è una vulnerabilità ALTO (CVSS 7.5) che riguarda mynewsgroups (carlos sanchez valle), php layers menu (php layers menu).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 4.4%, superiore al 91.4% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
mynewsgroups carlos_sanchez_valle	`≤ 0.6b`	No fix yet
php layers menu php_layers_menu	`= 2.3.5`	No fix yet

Description

PHP remote file inclusion vulnerability in /lib/tree/layersmenu.inc.php in the PHP Layers Menu 2.3.5 package for MyNewsGroups :) 0.6b and earlier allows remote attackers to execute arbitrary PHP code via a URL in the myng_root parameter.

References

secunia.com/advisories/21263 · Vendor Advisory
securityreason.com/securityalert/1316
securitytracker.com/id
bb-pcsecurity.de/sicherheit_266.htm · Exploit
osvdb.org/27666
securityfocus.com/archive/1/441734/100/0/threaded
securityfocus.com/bid/19258 · Exploit
vupen.com/english/advisories/2006/3073 · Vendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/28091
exploit-db.com/exploits/2096

Altre vulnerabilità di mynewsgroups

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free