CVE-2006-6748

Newxooper < 0.9 - Remote Code Execution via i-accueil.php chemin Parameter

Title source: llm
STIX 2.1

Description

PHP remote file inclusion vulnerability in i-accueil.php in Newxooper 0.9 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the chemin parameter. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.

References (1)

Core 1
Core References
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2006/5118

Scores

EPSS 0.0122
EPSS Percentile 65.1%

Details

CWE
CWE-94
Status published
Products (1)
newxooper/newxooper < 0.9
Published Dec 27, 2006
Tracked Since Feb 18, 2026