CVE-2006-2686

Published: May 31, 2006Modified: Apr 16, 2026

6.4

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Exploitability: 10.0 / Impact: 4.9

Source: NVD

Description

PHP remote file inclusion vulnerabilities in ActionApps 2.8.1 allow remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[AA_INC_PATH] parameter in (1) cached.php3, (2) cron.php3, (3) discussion.php3, (4) filldisc.php3, (5) filler.php3, (6) fillform.php3, (7) go.php3, (8) hiercons.php3, (9) jsview.php3, (10) live_checkbox.php3, (11) offline.php3, (12) post2shtml.php3, (13) search.php3, (14) slice.php3, (15) sql_update.php3, (16) view.php3, (17) multiple files in the (18) admin/ folder, (19) includes folder, and (20) modules/ folder.

Affected (1)

Products: Actionapps: Actionapps

Actionapps

1 product

Actionapps

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Actionapps Actionapps	Version 2.8.1

Related CWEs

CWE-94

Improper Control of Generation of Code ('Code Injection')

The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

References (122)

http://secunia.com/advisories/20299

Source: cve@mitre.org

ExploitVendor Advisory

http://www.osvdb.org/27253

Source: cve@mitre.org

http://www.osvdb.org/27254

Source: cve@mitre.org

http://www.osvdb.org/27256

Source: cve@mitre.org

http://www.osvdb.org/27257

Source: cve@mitre.org

http://www.osvdb.org/27258

Source: cve@mitre.org

http://www.osvdb.org/27259

Source: cve@mitre.org

http://www.osvdb.org/27260

Source: cve@mitre.org

http://www.osvdb.org/27261

Source: cve@mitre.org

http://www.osvdb.org/27262

Source: cve@mitre.org

http://www.osvdb.org/27263

Source: cve@mitre.org

http://www.osvdb.org/27264

Source: cve@mitre.org

http://www.osvdb.org/27265

Source: cve@mitre.org

http://www.osvdb.org/27266

Source: cve@mitre.org

http://www.osvdb.org/27267

Source: cve@mitre.org

http://www.osvdb.org/27268

Source: cve@mitre.org

http://www.osvdb.org/27269

Source: cve@mitre.org

http://www.osvdb.org/27270

Source: cve@mitre.org

http://www.osvdb.org/27271

Source: cve@mitre.org

http://www.osvdb.org/27272

Source: cve@mitre.org

http://www.osvdb.org/27273

Source: cve@mitre.org

http://www.osvdb.org/27274

Source: cve@mitre.org

http://www.osvdb.org/27275

Source: cve@mitre.org

http://www.osvdb.org/27276

Source: cve@mitre.org

http://www.osvdb.org/27277

Source: cve@mitre.org

http://www.osvdb.org/27278

Source: cve@mitre.org

http://www.osvdb.org/27279

Source: cve@mitre.org

http://www.osvdb.org/27280

Source: cve@mitre.org

http://www.osvdb.org/27281

Source: cve@mitre.org

http://www.osvdb.org/27282

Source: cve@mitre.org

http://www.osvdb.org/27283

Source: cve@mitre.org

http://www.osvdb.org/27284

Source: cve@mitre.org

http://www.osvdb.org/27285

Source: cve@mitre.org

http://www.osvdb.org/27286

Source: cve@mitre.org

http://www.osvdb.org/27287

Source: cve@mitre.org

http://www.osvdb.org/27288

Source: cve@mitre.org

http://www.osvdb.org/27289

Source: cve@mitre.org

http://www.osvdb.org/27290

Source: cve@mitre.org

http://www.osvdb.org/27291

Source: cve@mitre.org

http://www.osvdb.org/27292

Source: cve@mitre.org

http://www.osvdb.org/27293

Source: cve@mitre.org

http://www.osvdb.org/27294

Source: cve@mitre.org

http://www.osvdb.org/27295

Source: cve@mitre.org

http://www.osvdb.org/27296

Source: cve@mitre.org

http://www.osvdb.org/27297

Source: cve@mitre.org

http://www.osvdb.org/27298

Source: cve@mitre.org

http://www.osvdb.org/27299

Source: cve@mitre.org

http://www.osvdb.org/27300

Source: cve@mitre.org

http://www.osvdb.org/27301

Source: cve@mitre.org

http://www.osvdb.org/27302

Source: cve@mitre.org

http://www.osvdb.org/27303

Source: cve@mitre.org

http://www.osvdb.org/27304

Source: cve@mitre.org

http://www.osvdb.org/27305

Source: cve@mitre.org

http://www.osvdb.org/27306

Source: cve@mitre.org

http://www.osvdb.org/27308

Source: cve@mitre.org

http://www.osvdb.org/27309

Source: cve@mitre.org

http://www.osvdb.org/27310

Source: cve@mitre.org

http://www.securityfocus.com/bid/19133

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/1997

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/26776

Source: cve@mitre.org

https://www.exploit-db.com/exploits/1829

Source: cve@mitre.org

http://secunia.com/advisories/20299