CVE-2006-0659: Code Injection
Multiple PHP remote file include vulnerabilities in RunCMS 1.2 and earlier, with registerglobals and allowurlfopen enabled, allow remote attackers to execute arbitrary code via the bbPath[path] parameter in (1) class.forumposts.php and (2) forumpollrenderer.php.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2006-0659?
CVE-2006-0659 is classified as a critical vulnerability due to its potential for remote code execution.
How do I fix CVE-2006-0659?
To mitigate CVE-2006-0659, disable register_globals and allow_url_fopen in your PHP configuration and upgrade to a secure version of RunCMS.
What systems are affected by CVE-2006-0659?
CVE-2006-0659 affects multiple versions of RunCMS up to and including 1.2, particularly 1.1 and 1.1a.
What types of attacks can be executed through CVE-2006-0659?
Exploiting CVE-2006-0659 allows remote attackers to execute arbitrary code on the vulnerable system.
Are there any known exploits for CVE-2006-0659?
Yes, there are known exploits for CVE-2006-0659 that leverage the vulnerabilities in the bbPath[path] parameter.