CVE-2006-6773

Fishyshoop 0.930 beta - RCE

Title source: llm

Description

pages/register/register.php in Fishyshoop 0.930 beta allows remote attackers to create arbitrary administrative users by setting the is_admin HTTP POST parameter to 1.

Exploits (1)

exploitdb WORKING POC VERIFIED

by James Gray · perlwebappsphp

https://www.exploit-db.com/exploits/3011

View Code ZIP pw:eip

References (5)

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/archive/1/455260/100/0/threaded

[Third Party Advisory] http://securityreason.com/securityalert/2077

[Exploit] http://www.securityfocus.com/bid/21731

[Vendor Advisory] http://secunia.com/advisories/23490

[Third Party Advisory] http://www.vupen.com/english/advisories/2006/5182

Scores

EPSS 0.0479

EPSS Percentile 89.5%

Details

Status published

Products (1)

fishyshoop/fishyshoop 0.930_beta

Published Dec 27, 2006

Tracked Since Feb 18, 2026