CVE-2006-0169 | BDVDB-2026-14570 Detail

Description#

addresses.php3 in MyPhPim 01.05 does not restrict uploaded files, which allows remote attackers to execute arbitrary PHP code via the pdbfile variable, then directly accessing those files from the uploads directory.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://evuln.com/vulns/23/summary.html
http://www.securityfocus.com/bid/16208
http://secunia.com/advisories/18399
http://www.securityfocus.com/archive/1/421626/100/0/threaded
https://exchange.xforce.ibmcloud.com/vulnerabilities/24070
http://www.vupen.com/english/advisories/2006/0147

Exploit#

No public exploit known

History#

Version 12006-01-11Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.