Security Advisory

CVE-2006-6975

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2007-02-08 17:00:00

Last updated 2025-01-17 14:13:37

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

PHP remote file inclusion vulnerability in centipaid_class.php in CentiPaid 1.4.3 allows remote attackers to execute arbitrary code via a URL in the class_pwd parameter. NOTE: this issue has been disputed by CVE and multiple third parties, who state that $class_pwd is set to a static value before the relevant include statement

← Browse all CVEs View on cve.org ↗