2049Third-party advisory
http://securityreason.com/securityalert/2049 CVE-2006-6648
RateMe 1.3.2 - 'main.inc.php' Remote File Inclusion
Record summary
CVE-2006-6648 has a selected CVSS score of 7.5; EIP currently links 1 catalogued exploit.
Description
PHP remote file inclusion vulnerability in main.inc.php in planetluc.com RateMe 1.3.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the pathtoscript parameter.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBRateMe 1.3.2 - 'main.inc.php' Remote File InclusionExploitDB exploitby Al7ejaz HackerNot analyzed1 file
References
61017431vdb entry
http://securitytracker.com/id?1017431 20061218 RateMe <= all versions => ( main.inc.php ) Remote File Include Vulnerabilitymailing list
http://www.securityfocus.com/archive/1/454708/100/0/threaded 21642vdb entry
http://www.securityfocus.com/bid/21642 ADV-2006-5058vdb entry
http://www.vupen.com/english/advisories/2006/5058 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2006-6648