QwikSec

Security Database

CVE

CWE

Training

CVE-2006-7018

Published: Feb 15, 2007

Modified: Aug 7, 2024

PUBLISHED

Description

phpwcms 1.2.5-DEV and earlier, and 1.1 before RC4, allows remote attackers to execute arbitrary code via a crafted argument to the nome_evento parameter to phpwcms_code_snippets/mail_file_form.php and (2) sample_ext_php/mail_file_form.php, which is processed by the render_PHPcode function.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

third-party-advisory

x_refsource_SECUNIA

http://www.phpwcms.de/forum/viewtopic.php?t=10958

x_refsource_CONFIRM

vdb-entry

x_refsource_VUPEN

phpwcms-mailfileform-file-include(26126)

vdb-entry

x_refsource_XF

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.