CVE-2006-6285

Published: Dec 4, 2006Modified: Apr 23, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

PHP remote file inclusion vulnerability in index.php in Kai Blankenhorn Bitfolge simple and nice index file (aka snif) 1.5.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the externalConfig parameter. NOTE: CVE and other third parties dispute this vulnerability because $externalConfig is defined before use

Affected (1)

Products: Kai Blankenhorn Bitfolge: Simple And Nice Index File

Kai Blankenhorn Bitfolge

1 product

Simple And Nice Index File

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Kai Blankenhorn Bitfolge Simple And Nice Index File	Up to 1.5.2

References (10)

http://attrition.org/pipermail/vim/2006-December/001159.html

Source: cve@mitre.org

http://www.attrition.org/pipermail/vim/2006-December/001161.html

Source: cve@mitre.org

http://www.securityfocus.com/bid/21378

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/30613

Source: cve@mitre.org

https://www.exploit-db.com/exploits/2868

Source: cve@mitre.org

http://attrition.org/pipermail/vim/2006-December/001159.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.attrition.org/pipermail/vim/2006-December/001161.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/21378

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/30613

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.exploit-db.com/exploits/2868

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.