CVE-2006-4557

ALTO 7.5CVE-2006-4557 · Published 06/09/2006 · updated 16/06/2026

In breve

CVE-2006-4557 è una vulnerabilità ALTO (CVSS 7.5) che riguarda discloser (robert jewell).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.5%, superiore al 74.6% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
discloser robert_jewell	`= 0.0.4`	No fix yet

Description

PHP remote file inclusion vulnerability in plugins/plugins.php in Bob Jewell Discloser 0.0.4 allows remote attackers to execute arbitrary PHP code via a URL in the type parameter. NOTE: another researcher has stated that an attacker cannot control the type parameter. As of 20060901, CVE analysis concurs with the dispute

References

securityfocus.com/archive/1/443466/100/200/threaded
securityfocus.com/archive/1/443522/100/200/threaded
securityfocus.com/archive/1/443710/100/100/threaded
securityfocus.com/archive/1/444074/100/100/threaded

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free