Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com

CVE-2006-5055

Description

PHP remote file inclusion vulnerability in admin/testing/tests/0004_init_urls.php in syntaxCMS 1.1.1 through 1.3 allows remote attackers to execute arbitrary PHP code via a URL in the init_path parameter.

POC

Reference

- http://marc.info/?l=full-disclosure&m=115913461828660&w=2

- https://www.exploit-db.com/exploits/2424

Github

No PoCs found on GitHub currently.