Security Advisory

CVE-2006-5634

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2006-11-01 00:00:00
Last updated 2024-08-07 19:55:53
Assigner mitre
State PUBLISHED

Description

Multiple PHP remote file inclusion vulnerabilities in phpProfiles 2.1 Beta allow remote attackers to execute arbitrary PHP code via a URL in the (1) reqpath parameter to (a) body.inc.php and (b) body_blog.inc.php in users/include/; or the (2) usrinc parameter in users/include/upload_ht.inc.php.