EDB-3454

functional

PostNuke Module phgstats 0.5 - 'phgdir' Remote File Inclusion

view exploit source exploit_dbverifiedtype webappsauthor bd0rkpublished 2007-03-11catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2006-0164UShigh7.5Exploit
phgstats.inc.php in phgstats before 0.5.1, if register_globals is enabled, allows remote attackers to include arbitrary files and execute arbitrary PHP code by modifying the PHGDIR…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan