CVE-2006-5185 | BDVDB-2026-19616 Detail

Description#

Eval injection vulnerability in Template.php in HAMweather 3.9.8.4 and earlier allows remote attackers to execute arbitrary code via a modified query string, which is supplied to an eval function call within the do_parse_code function.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://secunia.com/advisories/22242
http://www.gulftech.org/?node=research&article_id=00115-09302006
http://www.vupen.com/english/advisories/2006/3881
http://www.securityfocus.com/bid/20311
http://support.hamweather.com/viewtopic.php?t=6548
https://exchange.xforce.ibmcloud.com/vulnerabilities/29304

Exploit#

No public exploit known

History#

Version 12006-10-06Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.