CVE-2006-1563 Code injection in n/a
Remote administrators can inject arbitrary PHP code into the config file, leading to code execution on the server.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2006-1563?
CVE-2006-1563 is a high-severity code injection vulnerability in n/a, published on 31 Mar 2006. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
Direct static code injection vulnerability in config.php in vscripts (aka Kuba Kunkiewicz) [V]Book (aka VBook) 2.0 allows remote administrators to execute arbitrary PHP code into the config file, which is included other [V]Book scripts.
Which versions are affected by CVE-2006-1563?
It affects 1 product.
Products include Vscripts Vbook.
How do I fix CVE-2006-1563?
No fix has been published for CVE-2006-1563 yet. Limit exposure of the affected software until one is available.
Upgrade, and never evaluate templates, expressions or code built from user input. More about Code injection.
Is CVE-2006-1563 being exploited?
There is no known exploitation of CVE-2006-1563 in the wild and no public exploit code.
Other vulnerabilities in n/a
- CVE-2006-1562 Multiple cross-site scripting (XSS) vulnerabilities in index.php in vscripts (aka Kuba Kunkiewicz) [V]Book (aka VBook) 2.0 allow remote atta
- CVE-2006-1561 SQL injection vulnerability in index.php in vscripts (aka Kuba Kunkiewicz) [V]Book (aka VBook) 2.0 allows remote attackers to execute arbitr
Sources
Also known as GHSA-rv99-2v4h-x9j7.