← Back

CVE-2006-5089

nvd nist
Published: Sep 29, 2006Modified: Apr 23, 2026

JSON object

Loading...
7.5
Vector
AV:N/AC:L/Au:N/C:P/I:P/A:P
Exploitability: 10.0 / Impact: 6.4
Source: NVD

Description

PHP remote file inclusion vulnerability in mybic_server.php in Jim Plush My-BIC 0.6.5 allows remote attackers to execute arbitrary PHP code via a URL in the file parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information. CVE disputes this vulnerability because the file variable is defined before use in a way that prevents arbitrary inclusion

Affected (1)

Products: My Bic: My Bic
1 product
My Bic
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Version 0.6.5

Timeline

No history available yet.