CVE-2006-5621

ALTO 7.5CVE-2006-5621 · Published 31/10/2006 · updated 16/06/2026

In breve

CVE-2006-5621 è una vulnerabilità ALTO (CVSS 7.5) che riguarda ask rave (ask rave).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 2.8%, superiore al 86.7% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
ask rave ask_rave	`≤ 0.9_pr`	No fix yet

Description

PHP remote file inclusion vulnerability in end.php in ask_rave 0.9 PR, and other versions before 0.9b, allows remote attackers to execute arbitrary PHP code via a URL in the footfile parameter.

References

rave.jk-digital.com/blog/2006/12/08/ask_rave-09b-released · Patch
securityfocus.com/bid/20758 · Exploit
vupen.com/english/advisories/2006/4211 · Vendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/29825
exploit-db.com/exploits/2654

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free