CVE-2006-2323
23Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 9.8%
from disclosure to weapon0 days
Published on NVDMay 12
1st PoCMay 8
exploitation probability
9.8%top 5% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
Multiple PHP remote file inclusion vulnerabilities in SmartISoft phpListPro 2.01 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the returnpath parameter in (1) editsite.php, (2) addsite.php, and (3) in.php. NOTE: The config.php vector is already covered by CVE-2006-1749.
Affected products
n/a · n/apublic PoCs found — 1✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/1769⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
http://securityreason.com/securityalert/156http://securityreason.com/securityalert/688http://securityreason.com/securityalert/882http://securitytracker.com/id?1016060https://exchange.xforce.ibmcloud.com/vulnerabilities/26359http://www.osvdb.org/25904http://www.osvdb.org/25905http://www.osvdb.org/25906http://www.securityfocus.com/archive/1/433285/100/0/threadedhttp://www.securityfocus.com/archive/1/433562/100/0/threaded