Vulnerability Details CVE-2006-7036
PHP remote file inclusion vulnerability in register.php for Andys Chat 4.5 allows remote attackers to execute arbitrary code via the action parameter. NOTE: this issue was announced by an unreliable researcher, but the vendor is no longer distributing the product, so the original claims can not be evaluated.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.034
EPSS Ranking 87.0%
CVSS Severity
CVSS v2 Score 10.0
References
- http://securityreason.com/securityalert/2284
- http://www.securityfocus.com/archive/1/437300/30/4350/threaded
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27187
- http://securityreason.com/securityalert/2284
- http://www.securityfocus.com/archive/1/437300/30/4350/threaded
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27187
Products affected by CVE-2006-7036
-
cpe:2.3:a:andys_chat:andys_chat:4.5