Back to search
CVE-2006-4530
Published: Sep 1, 2006
Modified: Aug 7, 2024
PUBLISHED
Description
Direct static code injection vulnerability in include/change.php in membrepass 1.5 allows remote attackers to execute arbitrary PHP code via the aifon parameter, which is injected into include/variable.php.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
19790
vdb-entry
x_refsource_BID
20060831 Membrepass v1.5 Php code execution, Xss, Sql Injection
mailing-list
x_refsource_BUGTRAQ
ADV-2006-3427
vdb-entry
x_refsource_VUPEN
membrepass-include-file-include(28692)
vdb-entry
x_refsource_XF
21715
third-party-advisory
x_refsource_SECUNIA
1487
third-party-advisory
x_refsource_SREASON
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now