CVE-2006-6511

Published: Dec 14, 2006Modified: Apr 23, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

dadaIMC .99.3 uses an insufficiently restrictive FilesMatch directive in the installed .htaccess file, which allows remote attackers to execute arbitrary PHP code by uploading files whose names contain (1) feature, (2) editor, (3) newswire, (4) otherpress, (5) admin, (6) pbook, (7) media, or (8) mod, which are processed as PHP file types (application/x-httpd-php).

Affected (1)

Products: Dadaimc: Dadaimc

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Dadaimc Dadaimc	version ≤ 0.99.3

References (8)

http://bugs.dadaimc.org/view.php?id=191

Source: cve@mitre.org

http://secunia.com/advisories/23305

Source: cve@mitre.org

Vendor Advisory

http://www.vupen.com/english/advisories/2006/4977

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/30862

Source: cve@mitre.org

http://bugs.dadaimc.org/view.php?id=191

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/23305

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.vupen.com/english/advisories/2006/4977

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/30862

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.