CVE-2006-3957

PHP remote file inclusion vulnerability in payment.php in BosDev BosDates allows remote attackers to execute arbitrary PHP code via a URL in the insPath parameter.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2006-08-01

Last modified

2024-09-16

Affected products

• Bosdates (Bosdev)

References

• http://securitytracker.com/id?1016585
• http://www.jaascois.com/exploits/18602020
• http://www.securityfocus.com/bid/19191