Unscored severity · published Apr 4, 2006
CVE-2006-1602
PHP remote file inclusion vulnerability in includes/functions_common.php in the VWar Account module (vWar_Account) in PHPNuke Clan 3.0.1 allows remote attackers to include…
–
CVSS
1.8%
EPSS
No
On KEV
Description
PHP remote file inclusion vulnerability in includes/functions_common.php in the VWar Account module (vWar_Account) in PHPNuke Clan 3.0.1 allows remote attackers to include arbitrary files via a URL in the vwar_root2 parameter. NOTE: it is possible that this issue stems from a problem in VWar itself, but this is not clear.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.8% · higher than 79% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PH
Phpnuke-clan · Phpnuke-clan
3.0.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-1602
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-1602
Vendor Advisory
http://secunia.com/advisories/19501
www.osvdb.org
http://www.osvdb.org/24481
www.securityfocus.com
http://www.securityfocus.com/archive/1/429615/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/17356
www.vupen.com
http://www.vupen.com/english/advisories/2006/1202
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/25609
More from Phpnuke-clan
–
CVE-2007-4606
PHP remote file inclusion vulnerability in convert/mvcw_conver.php in the Virtual War (VWar) module for PHPNuke-Clan (PNC) 4.2.0 and earlier allows remote attackers to execute…