CVE-2006-5555

EPNadmin <0.7.1 - RCE

Title source: llm

Description

PHP remote file inclusion vulnerability in constantes.inc.php in EPNadmin 0.7 and 0.7.1 allows remote attackers to execute arbitrary PHP code via the langage parameter.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Kw3[R]Ln · perlwebappsphp

https://www.exploit-db.com/exploits/2596

View Code ZIP pw:eip

References (6)

[Exploit, Third Party Advisory] https://www.exploit-db.com/exploits/2596

[Vendor Advisory] http://secunia.com/advisories/22508

[Exploit] http://www.securityfocus.com/bid/20624

[Third Party Advisory] http://www.vupen.com/english/advisories/2006/4167

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/29671

[Exploit] http://www.attrition.org/pipermail/vim/2006-October/001098.html

Scores

EPSS 0.1903

EPSS Percentile 95.3%

Details

Status published

Products (2)

epnadmin/epnadmin 0.7

epnadmin/epnadmin 0.7.1

Published Oct 26, 2006

Tracked Since Feb 18, 2026