Back to search
CVE-2006-1371
Published: Mar 23, 2006
Modified: Aug 7, 2024
PUBLISHED
Description
Laurentiu Matei eXpandable Home Page (XHP) CMS 0.5 and earlier allows remote authenticated users to use the HTMLArea FileManager plugin to upload and execute arbitrary PHP files using (1) manager.php, (2) standalonemanager.php, and (3) images.php.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
19353
third-party-advisory
x_refsource_SECUNIA
24058
vdb-entry
x_refsource_OSVDB
17209
vdb-entry
x_refsource_BID
ADV-2006-1052
vdb-entry
x_refsource_VUPEN
xhpcms-filemanager-file-upload(25399)
vdb-entry
x_refsource_XF
20060324 XHP vendor ack/fix
mailing-list
x_refsource_VIM
1605
exploit
x_refsource_EXPLOIT-DB
24059
vdb-entry
x_refsource_OSVDB
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now