CVE-2006-3997 | BDVDB-2026-18489 Detail
Description#
PHP remote file inclusion vulnerability in hsList.php in WoWRoster (aka World of Warcraft Roster) 1.5.x and earlier allows remote attackers to execute arbitrary PHP code via a URL in the subdir parameter.
Impact#
No impact statement in the source data.
Weaknesses#
No weakness recorded in the source data.
References#
- http://www.wowroster.net/Forums/viewtopic/t=333.html
- http://securitytracker.com/id?1016631
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28101
- http://www.securityfocus.com/bid/19269
- http://securityreason.com/securityalert/1329
- http://secunia.com/advisories/21299
- http://www.securityfocus.com/archive/1/441820/100/0/threaded
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.