Security Advisory

CVE-2006-4349

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2006-08-24 21:00:00

Last updated 2024-08-07 19:06:07

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

PHP remote file inclusion vulnerability in ToendaCMS 1.0.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the tcms_administer_site parameter to an unspecified script, probably index.php. NOTE: this issue has been disputed by a third party, who states that $tcms_administer_site is initialized to a constant value within index.php

← Browse all CVEs View on cve.org ↗