Back to search
CVE-2006-2578
Published: May 24, 2006
Modified: Aug 7, 2024
PUBLISHED
Description
admin/cron.php in eSyndicat Directory 1.2, when register_globals is enabled and magic_quotes_gpc is disabled, allows remote attackers to include arbitrary files and possibly execute arbitrary PHP code via a null-terminated value in the path_to_config parameter.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
20218
third-party-advisory
x_refsource_SECUNIA
esyndicat-directory-cron-file-include(26663)
vdb-entry
x_refsource_XF
ADV-2006-1983
vdb-entry
x_refsource_VUPEN
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now