Unscored severity · published Oct 25, 2006
CVE-2006-5506
Multiple PHP remote file inclusion vulnerabilities in WiClear 0.10 allow remote attackers to execute arbitrary PHP code via the path parameter in (1) inc/prepend.inc.php, (2)…
–
CVSS
16.3%
EPSS
No
On KEV
Description
Multiple PHP remote file inclusion vulnerabilities in WiClear 0.10 allow remote attackers to execute arbitrary PHP code via the path parameter in (1) inc/prepend.inc.php, (2) inc/lib/boxes.lib.php, (3) inc/lib/tools.lib.php, (4) tools/trackback/index.php, and (5) tools/utf8conversion/index.php in admin/; and (6) prepend.inc.php, (7) lib/boxes.lib.php, and (8) lib/history.lib.php in inc/.
Exploitation
Is it being used?
Exploit prediction (EPSS)16.3% · higher than 97% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WI
Wiclear · Wiclear
0.10 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-5506
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-5506
Vendor Advisory
http://secunia.com/advisories/22547
wiclear.free.fr
http://wiclear.free.fr/
wiclear.free.fr
http://wiclear.free.fr/?Download
www.osvdb.org
http://www.osvdb.org/29942
www.osvdb.org
http://www.osvdb.org/29943
www.osvdb.org
http://www.osvdb.org/29944
More from Wiclear
–
CVE-2007-1097
Unrestricted file upload vulnerability in the onAttachFiles function in the upload tool (inc/lib/attachment.lib.php) in Wiclear before 0.11.1 allows remote attackers to upload and…