20060815 fusionnews 3,7 Remote File Inclusionmailing list
http://archives.neohapsis.com/archives/bugtraq/2006-08/0317.html CVE-2006-4240
Fusionphp Fusion News 3.7 - 'index.php' Remote File Inclusion
Record summary
CVE-2006-4240 has a selected CVSS score of 7.5; EIP currently links 1 catalogued exploit.
Description
PHP remote file inclusion vulnerability in index.php in Fusion News 3.7 allows remote attackers to execute arbitrary PHP code via a URL in the fpath parameter.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBFusionphp Fusion News 3.7 - 'index.php' Remote File InclusionExploitDB exploitby O.U.T.L.A.WNot analyzed1 file
References
71420Third-party advisory
http://securityreason.com/securityalert/1420 1016701vdb entry
http://securitytracker.com/id?1016701 19546vdb entry
http://www.securityfocus.com/bid/19546 ADV-2006-3298vdb entry
http://www.vupen.com/english/advisories/2006/3298 fusionnews-index-file-include(28400)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/28400 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2006-4240