Security Advisory

CVE-2006-2681

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2006-05-31 10:00:00

Last updated 2024-08-07 17:58:52

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

PHP remote file inclusion vulnerability in SocketMail Lite and Pro 2.2.6 and earlier, when register_globals and magic_quotes are enabled, allows remote attackers to execute arbitrary PHP code via a URL in the site_path parameter to (1) index.php and (2) inc-common.php.

← Browse all CVEs View on cve.org ↗