Security Advisory

CVE-2006-5067

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2006-09-28 00:00:00
Last updated 2024-08-07 19:32:23
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

PHP remote file inclusion vulnerability in loader.php in PHP System Administration Toolkit (PHPSaTK) allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[config] parameter. NOTE: this issue is disputed by CVE; analysis shows that the GLOBALS[config] variable is initialized before being used