cve/2006/CVE-2006-3984.md

CVE-2006-3984

Description

PHP remote file inclusion vulnerability in phpAdsNew/view.inc.php in Albasoftware Phpauction 2.1 and possibly later versions, with phpAdsNew 2.0.5, allows remote attackers to execute arbitrary PHP code via a URL in the phpAds_path parameter.

POC

Reference

• http://securityreason.com/securityalert/1320
• https://www.exploit-db.com/exploits/2100

Github

No PoCs found on GitHub currently.