CVE-2006-6545: High severity php errordocs vulnerability

Published Dec 14, 2006

Updated

PHP remote file inclusion vulnerability in includes/common.php in the ErrorDocs 1.0.0 and earlier module for mxBB (mxerrordocs) allows remote attackers to execute arbitrary PHP code via a URL in the modulerootpath parameter.

Affected Software

1 affected component

PHP ErrorDocs=1.0.0

Event History

Dec 14, 2006

CVE Published

via MITRE·02:00 AM

Data Sourced

via MITRE·02:00 AM

Description

Data Sourced

via NVD·02:28 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of CVE-2006-6545?

CVE-2006-6545 is considered a critical severity vulnerability due to its potential for remote code execution.

How do I fix CVE-2006-6545?

To fix CVE-2006-6545, upgrade to a version of mxBB that does not include the vulnerable ErrorDocs module, or remove the module entirely if it is not needed.

What software is affected by CVE-2006-6545?

CVE-2006-6545 affects the PHP ErrorDocs module versions 1.0.0 and earlier.

What type of vulnerability is CVE-2006-6545?

CVE-2006-6545 is a remote file inclusion vulnerability that allows attackers to execute arbitrary PHP code.

Who can exploit CVE-2006-6545?

CVE-2006-6545 can be exploited by remote attackers who can manipulate the module_root_path parameter.