QwikSec

Security Database

CVE

CWE

Training

CVE-2006-4656

Published: Sep 9, 2006

Modified: Aug 7, 2024

PUBLISHED

Description

PHP remote file inclusion vulnerability in admin/editeur/spaw_control.class.php in Web Provence SL_Site 1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the spaw_root parameter. NOTE: CVE analysis suggests that this issue is actually in a third party product, SPAW Editor PHP Edition.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

exploit

x_refsource_EXPLOIT-DB

slsite-spaw-file-include(28783)

vdb-entry

x_refsource_XF

20060907 SL_Site <= 1.0 [spaw_root] Remote File Include Vulnerability

mailing-list

x_refsource_BUGTRAQ

http://spaw.cvs.sourceforge.net/spaw/spaw/spaw_control.class.php?r1=1.19&r2=1.20

x_refsource_MISC

third-party-advisory

x_refsource_SREASON

vdb-entry

x_refsource_BID

http://spaw.cvs.sourceforge.net/spaw/spaw/spaw_control.class.php?r1=1.25&r2=1.26

x_refsource_MISC

http://spaw.cvs.sourceforge.net/spaw/spaw/docs/ChangeLog.txt?view=markup

x_refsource_CONFIRM

vdb-entry

x_refsource_SECTRACK

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.