CVE-2006-6863
critical · 9.8PHP remote file inclusion vulnerability in the Enigma2 plugin (Enigma2.php) in Enigma WordPress Bridge allows remote attackers to execute arbitrary PHP code via a URL in the boarddir parameter. NOTE: CVE disputes this issue, since $boarddir is set to a fixed value
9.8
CVSS
13.0%
EPSS (exploit prob.)
96th
EPSS percentile
2006-12-31
Published
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| enigma | wordpress_bridge | all versions |
Check a specific version with /api/v1/cve/match.
References
- http://securityreason.com/securityalert/2093
- http://securitytracker.com/id?017459
- http://www.attrition.org/pipermail/vim/2007-January/001207.html
- http://www.securityfocus.com/archive/1/455555/100/0/threaded
- http://www.securityfocus.com/bid/21826
- https://www.exploit-db.com/exploits/3051
- http://securityreason.com/securityalert/2093
- http://securitytracker.com/id?017459
- http://www.attrition.org/pipermail/vim/2007-January/001207.html
- http://www.securityfocus.com/archive/1/455555/100/0/threaded
- http://www.securityfocus.com/bid/21826
- https://www.exploit-db.com/exploits/3051
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2006-6863