CVE-2006-6417: High severity b2evolution b2evolution vulnerability
Published Dec 10, 2006
·Updated
PHP remote file inclusion vulnerability in inc/CONTROL/import/import-mt.php in b2evolution 1.8.5 through 1.9 beta allows remote attackers to execute arbitrary PHP code via a URL in the incpath parameter.
Affected Software
3 affected components
b2evolution b2evolution=1.8.5
b2evolution b2evolution=1.9
b2evolution b2evolution=1.9_beta
Event History
Dec 10, 2006
CVE Published
11:28 AM
Data Sourced
via NVD·11:28 AM
DescriptionSeverityAffected Software
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-6417?
CVE-2006-6417 is classified as a high-severity vulnerability that allows remote code execution.
2
How do I fix CVE-2006-6417?
To fix CVE-2006-6417, update b2evolution to a patched version beyond 1.9 beta.
3
What systems are affected by CVE-2006-6417?
CVE-2006-6417 affects b2evolution versions 1.8.5, 1.9, and 1.9 beta.
4
What is the impact of exploiting CVE-2006-6417?
Exploiting CVE-2006-6417 can allow attackers to execute arbitrary PHP code on the affected server.
5
Is CVE-2006-6417 still a concern today?
Yes, CVE-2006-6417 remains a concern for systems that have not been updated, particularly in legacy environments.