Multiple PHP remote file inclusion vulnerabilities in NES Game and NES System c108122 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the (1) phphtmllib parameter to (a) phphtmllib/includes.php; tag_utils/ scripts including (b) divtag_utils.php, (c) form_utils.php, (d) html_utils.php, and (e) localinc.php; and widgets/ scripts including (f) FooterNav.php, (g) HTMLPageClass.php, (h) InfoTable.php, (i) localinc.php, (j) NavTable.php, and (k) TextNav.php.
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2024-08-07T19:06:07.354Z

Reserved: 2006-08-22T00:00:00

Link: CVE-2006-4287

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Deferred

Published: 2006-08-22T17:04:00.000

Modified: 2025-04-03T01:03:51.193

Link: CVE-2006-4287

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.