CVE-2006-6023: High severity bloo bloo vulnerability

Published Nov 21, 2006

Updated

DISPUTED PHP remote file inclusion vulnerability in phoo.base.php in Bill Roberts Bloo 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the descriptorFileList parameter. NOTE: this issue is disputed by CVE since $descriptorFileList is used in a function definition within phoo.base.php.

Affected Software

1 affected component

Bloo Bloo=1.0

Event History

Nov 21, 2006

CVE Published

via MITRE·11:00 PM

Data Sourced

via MITRE·11:00 PM

Description

Disputed

11:07 PM

Data Sourced

via NVD·11:07 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of CVE-2006-6023?

CVE-2006-6023 is considered to pose a risk due to its potential for remote code execution via arbitrary PHP code.

How do I fix CVE-2006-6023?

To resolve CVE-2006-6023, ensure you are using a patched version of Bill Roberts Bloo or sanitize input for the descriptorFileList parameter.

What software is affected by CVE-2006-6023?

CVE-2006-6023 affects Bill Roberts Bloo version 1.0.

Can CVE-2006-6023 be exploited remotely?

Yes, CVE-2006-6023 can be exploited remotely by attackers to execute arbitrary PHP code.

Is CVE-2006-6023 still a threat today?

While CVE-2006-6023 was reported in 2006, it remains a potential threat if outdated software is in use.