PHP remote file inclusion vulnerability in centipaid_class.php in CentiPaid 1.4.3 allows remote attackers to execute arbitrary code via a URL in the class_pwd parameter. NOTE: this issue has been disputed by CVE and multiple third parties, who state that $class_pwd is set to a static value before the relevant include statement
References
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2022-10-03T16:21:24
Updated: 2022-10-03T16:21:24
Reserved: 2022-10-03T00:00:00
Link: CVE-2006-6975
JSON object: View
NVD Information
Status : Modified
Published: 2007-02-08T17:28:00.000
Modified: 2024-05-17T00:31:58.270
Link: CVE-2006-6975
JSON object: View
Redhat Information
No data.
CWE