CVE-2006-1477

高危 7.5CVE-2006-1477 · Published 29/03/2006 · updated 16/06/2026

要点

CVE-2006-1477 是影响 php live helper (turnkey web tools) 的高危 (CVSS 7.5)漏洞。
未来 30 天内被利用的概率（EPSS）：4.8%，高于 92.0% 的漏洞。
暂无已修复版本：请关注参考资料中的厂商公告。

Package	Affected versions	Patched versions
php live helper turnkey_web_tools	`= 1.8`	No fix yet

Description

Multiple PHP remote file inclusion vulnerabilities in Turnkey Web Tools PHP Live Helper 1.8 allow remote attackers to include and execute arbitrary PHP code via the abs_path parameter in (1) initiate.php, (2) waiting.php, (3) welcome.php, (4) admin/index.php, (5) javascript.php, (6) checkchat.php, and (7) blank.php.

References

secunia.com/advisories/19428 · Exploit
osvdb.org/24193
osvdb.org/24194
osvdb.org/24195
osvdb.org/24196
osvdb.org/24197
osvdb.org/24198
osvdb.org/24199
securityfocus.com/archive/1/428976/100/0/threaded
securityfocus.com/archive/1/437648/100/0/threaded
securityfocus.com/archive/1/437741/100/0/threaded
securityfocus.com/bid/18509
turnkeywebtools.com/forum/showthread.php · Patch
vupen.com/english/advisories/2006/1137
worlddefacers.de/Public/WD-TMPLH.txt · Exploit
exchange.xforce.ibmcloud.com/vulnerabilities/25489

php live helper 的其他漏洞

查看全部 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free