CVE-2006-0075: Code Injection
Published Jan 4, 2006
·Updated
Direct static code injection vulnerability in phpBook 1.3.2 and earlier allows remote attackers to execute arbitrary PHP code via the e-mail field (mail variable) in a new message, which is written to a PHP file.
Affected Software
5 affected components
GNU Phpbook=1.1
GNU Phpbook=1.2
GNU Phpbook<=1.3.2
GNU Phpbook=1.0
GNU Phpbook=1.3
Remediation
Patch Available
Patch Available
Event History
Jan 4, 2006
CVE Published
01:03 AM
CVE Published
via MITRE·06:00 AM
Data Sourced
via MITRE·06:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-0075?
CVE-2006-0075 is classified as a high severity vulnerability due to its potential for remote code execution.
2
How do I fix CVE-2006-0075?
To fix CVE-2006-0075, upgrade phpBook to version 1.3.3 or later, which addresses the vulnerability.
3
What type of vulnerability is CVE-2006-0075?
CVE-2006-0075 is a direct static code injection vulnerability affecting phpBook.
4
Which versions of phpBook are affected by CVE-2006-0075?
CVE-2006-0075 affects phpBook versions 1.3.2 and earlier.
5
Can CVE-2006-0075 be exploited remotely?
Yes, CVE-2006-0075 can be exploited remotely by attackers through the email field in a new message.