CVE-2006-1959

ActualScripts ActualAnalyzer Lite <2.72, Gold <7.63, Server <8.23 -...

Title source: llm
STIX 2.1

Description

PHP remote file inclusion vulnerability in direct.php in ActualScripts ActualAnalyzer Lite 2.72 and earlier, Gold 7.63 and earlier, and Server 8.23 and earlier allows remote attackers to execute arbitrary code via a URL in the rf parameter.

Exploits (1)

exploitdb WORKING POC VERIFIED
by Aesthetico · textwebappsphp
https://www.exploit-db.com/exploits/1767

References (9)

Core 9
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/25893
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/19743
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://securitytracker.com/id?1015967
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2006/1430
Third Party Advisory third-party-advisory x_refsource_sreason
http://securityreason.com/securityalert/742
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/17597
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/24778
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/431351/100/0/threaded
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/434562/100/0/threaded

Scores

EPSS 0.1689
EPSS Percentile 95.0%

Details

Status published
Products (3)
actualscripts/actualanalyzer 2.72
actualscripts/actualanalyzer 7.63 gold
actualscripts/actualanalyzer < 8.23
Published Apr 21, 2006
Tracked Since Feb 18, 2026