cve/2006/CVE-2006-5930.md

CVE-2006-5930

Description

Multiple PHP remote file inclusion vulnerabilities in Aigaion Web based bibliography management system 1.2.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the DIR parameter to (1) _basicfunctions.php, or (2) pageactionauthor.php.

POC

Reference

• http://securityreason.com/securityalert/1868
• https://www.exploit-db.com/exploits/2777

Github

No PoCs found on GitHub currently.