22947Third-party advisory
http://secunia.com/advisories/22947 CVE-2006-6045
Comdev One Admin 4.1 - 'Adminfoot.php' Remote Code Execution
Record summary
CVE-2006-6045 has a selected CVSS score of 6.8; EIP currently links 1 catalogued exploit.
Description
Multiple PHP remote file inclusion vulnerabilities in Comdev One Admin Pro 4.1 allow remote attackers to execute arbitrary PHP code via a URL in the path[skin] parameter to (1) adminfoot.php, (2) adminhead.php, or (3) adminlogin.php.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBComdev One Admin 4.1 - 'Adminfoot.php' Remote Code ExecutionExploitDB exploitby w4ck1ngNot analyzed1 file
References
71902Third-party advisory
http://securityreason.com/securityalert/1902 1017247vdb entry
http://securitytracker.com/id?1017247 20061115 Comdev One Admin Pro.v4.1 ( path[skin] ) Remote File includemailing list
http://www.securityfocus.com/archive/1/451857/100/0/threaded ADV-2006-4581vdb entry
http://www.vupen.com/english/advisories/2006/4581 comdevone-pathskin-file-include(30367)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/30367 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2006-6045