CVE Database
/

CVE-2006-4287

Back to search

CVE-2006-4287

Published: Aug 22, 2006

Modified: Aug 7, 2024

PUBLISHED

Description

Multiple PHP remote file inclusion vulnerabilities in NES Game and NES System c108122 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the (1) phphtmllib parameter to (a) phphtmllib/includes.php; tag_utils/ scripts including (b) divtag_utils.php, (c) form_utils.php, (d) html_utils.php, and (e) localinc.php; and widgets/ scripts including (f) FooterNav.php, (g) HTMLPageClass.php, (h) InfoTable.php, (i) localinc.php, (j) NavTable.php, and (k) TextNav.php.

VendorProductVersions

n/a

n/a

affected
n/a

References

28045
vdb-entry
x_refsource_OSVDB
28044
vdb-entry
x_refsource_OSVDB
28054
vdb-entry
x_refsource_OSVDB
28049
vdb-entry
x_refsource_OSVDB
28053
vdb-entry
x_refsource_OSVDB
21593
third-party-advisory
x_refsource_SECUNIA
28052
vdb-entry
x_refsource_OSVDB
ADV-2006-3339
vdb-entry
x_refsource_VUPEN
28047
vdb-entry
x_refsource_OSVDB
28048
vdb-entry
x_refsource_OSVDB
28051
vdb-entry
x_refsource_OSVDB
28050
vdb-entry
x_refsource_OSVDB
2226
exploit
x_refsource_EXPLOIT-DB
19611
vdb-entry
x_refsource_BID
28046
vdb-entry
x_refsource_OSVDB

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now