Unscored severity · published Oct 31, 2006
CVE-2006-5625
PHP remote file inclusion vulnerability in wwwdev/nxheader.inc.php in N/X 2002 Professional Edition Web Content Management System (WCMS) 4.1 and earlier allows remote attackers to…
–
CVSS
2.4%
EPSS
No
On KEV
Description
PHP remote file inclusion vulnerability in wwwdev/nxheader.inc.php in N/X 2002 Professional Edition Web Content Management System (WCMS) 4.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the c[path] parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.4% · higher than 84% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NX
N X Wcms · NX
through 4.1; 2002_prerelease1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-5625
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-5625
Vendor Advisory
http://secunia.com/advisories/22627
Exploit
http://www.securityfocus.com/bid/20773
www.vupen.com
http://www.vupen.com/english/advisories/2006/4227
www.exploit-db.com
https://www.exploit-db.com/exploits/2659
More from N X Wcms
–
CVE-2007-2199
PHP remote file inclusion vulnerability in lib/pcltar.lib.php (aka pcltar.php) in the PclTar module 1.3 and 1.3.1 for Vincent Blavet PhpConcept Library, as used in multiple…