CVE-2006-7194 | BDVDB-2026-23532 Detail

Description#

PHP remote file inclusion vulnerability in modules/Mysqlfinder/MysqlfinderAdmin.php in Agora 1.4 RC1, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the _SESSION[PATH_COMPOSANT] parameter.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.exploit-db.com/exploits/2726
http://advisories.echo.or.id/adv/adv59-theday-2006.txt
http://marc.info/?l=bugtraq&m=116283849004075&w=2
https://exchange.xforce.ibmcloud.com/vulnerabilities/30031

Exploit#

https://www.exploit-db.com/exploits/2726

History#

Version 12007-04-18Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.