824Third-party advisory
http://securityreason.com/securityalert/824 CVE-2006-2121
I-RATER Platinum - 'Config_settings.TPL.php' Remote File Inclusion
Record summary
CVE-2006-2121 has a selected CVSS score of 5.0; EIP currently links 1 catalogued exploit.
Description
PHP remote file include vulnerability in admin/config_settings.tpl.php in I-RATER Platinum allows remote attackers to execute arbitrary code via a URL in the include_path parameter. NOTE: this is a different vector, and possibly a different vulnerability, than CVE-2006-1929.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBI-RATER Platinum - 'Config_settings.TPL.php' Remote File InclusionExploitDB exploitby O.U.T.L.A.WNot analyzed1 file
References
620060428 [Kurdish Secure Advisory #1] I-RATER Platinum "Admin/configsettings.tpl.php" Remote File Include Vulnerabilitymailing list
http://www.securityfocus.com/archive/1/432404/100/0/threaded 20060429 I-RATER Platinum Remote File Inclusion exploit Cod3d by R@1D3Nmailing list
http://www.securityfocus.com/archive/1/432596/100/0/threaded 17731vdb entry
http://www.securityfocus.com/bid/17731 irater-configsettingtpl-file-include(26203)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/26203 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2006-2121