CVE-2006-6710

Published: Dec 23, 2006Modified: Apr 23, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Multiple PHP remote file inclusion vulnerabilities in PgmReloaded 0.8.5 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the (1) lang parameter to (a) index.php, the (2) CFG[libdir] and (3) CFG[localedir] parameters to (b) common.inc.php, and the CFG[localelangdir] parameter to (c) form_header.php.

Affected (12)

Products: Matteolucarelli: Pgmreloaded

Matteolucarelli

1 product

Pgmreloaded

Configuration A

12 vulnerable

Vulnerable Software	Affected Versions
Matteolucarelli Pgmreloaded	Up to 0.8.5
Matteolucarelli Pgmreloaded	Version 0.5
Matteolucarelli Pgmreloaded	Version 0.6.2
Matteolucarelli Pgmreloaded	Version 0.6
Matteolucarelli Pgmreloaded	Version 0.7.1
Matteolucarelli Pgmreloaded	Version 0.7.3
Matteolucarelli Pgmreloaded	Version 0.7
Matteolucarelli Pgmreloaded	Version 0.8.1
Matteolucarelli Pgmreloaded	Version 0.8.2
Matteolucarelli Pgmreloaded	Version 0.8.3
Matteolucarelli Pgmreloaded	Version 0.8.4
Matteolucarelli Pgmreloaded	Version 0.8