QwikSec

Security Database

CVE

CWE

Training

CVE-2006-4283

Published: Aug 22, 2006

Modified: Aug 7, 2024

PUBLISHED

Description

Multiple PHP remote file inclusion vulnerabilities in SOLMETRA SPAW Editor 1.0.6 and 1.0.7 allow remote attackers to execute arbitrary PHP code via a URL in the spaw_dir parameter in dialogs/ scripts including (1) a.php, (2) collorpicker.php, (3) img.php, (4) img_library.php, (5) table.php, or (6) td.php.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

20060819 [Kurdish Security # 23] Spaw Editor Remote Include Vulnerability

mailing-list

x_refsource_BUGTRAQ

vdb-entry

x_refsource_BID

spaweditor-spawdir-file-include(28466)

vdb-entry

x_refsource_XF

third-party-advisory

x_refsource_SREASON

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.