NuytsTech Security

CVE-2006-0075

by ·

Direct static code injection vulnerability in phpBook 1.3.2 and earlier allows remote attackers to execute arbitrary PHP code via the e-mail field (mail variable) in a new message, which is written to a PHP file.

Date published : 2006-01-03

http://www.securityfocus.com/bid/16106

http://www.securityfocus.com/archive/1/420698/100/0/threaded

Tags: