Vulnerability Database

296,322

Total vulnerabilities in the database

CVE-2006-5678

PHP remote file inclusion vulnerability in common/visiteurs/include/library.inc.php in J-Pierre DEZELUS Les Visiteurs 2.0.1, as used in phpMyConferences (phpMyConference) 8.0.2 and possibly other products, allows remote attackers to execute arbitrary PHP code via a URL in the lvc_modules_dir parameter. NOTE: CVE disputes this vulnerability, because the inclusion occurs in a function that is not called during a direct request to library.inc.php

  • Published: Nov 3, 2006
  • Updated: Nov 8, 2023
  • CVE: CVE-2006-5678
  • Severity: High
  • Exploit:

CVSS v2:

  • Severity: High
  • Score: 7.5
  • AV:N/AC:L/Au:N/C:P/I:P/A:P

No CWE or OWASP classifications available.

Software From Fixed in
j-pierre_dezelus / les_visiteurs 2.0.1 2.0.1.x
phpmyconferences / phpmyconferences 8.0.2 8.0.2.x