CVE-2006-6661 | BDVDB-2026-21075 Detail

Description#

Variable overwrite vulnerability in blog.php in PHP-Update 2.7 and earlier allows remote attackers to overwrite arbitrary program variables and execute arbitrary PHP code via multiple vectors that use the extract function, as demonstrated by the (1) f, (2) newmessage, (3) newusername, (4) adminuser, and (5) permission parameters.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.exploit-db.com/exploits/2953
http://secunia.com/advisories/23407
http://www.vupen.com/english/advisories/2006/5088

Exploit#

https://www.exploit-db.com/exploits/2953

History#

Version 12006-12-20Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.