CVE Vulnerabilities

CVE-2006-0214

Published: Jan 15, 2006 | Modified: Nov 21, 2024
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

Eval injection vulnerability in ezDatabase 2.0 and earlier allows remote attackers to execute arbitrary PHP code via the db_id parameter to visitorupload.php, as demonstrated using phpinfo and include function calls.

Affected Software

Name Vendor Start Version End Version
Ezdatabase Indexcor 2.0 (including) 2.0 (including)
Ezdatabase Indexcor 2.1.2 (including) 2.1.2 (including)

References