CVE

Id
22765  
CVE No.
CVE-2006-6661  
Status
Candidate  
Description
Variable overwrite vulnerability in blog.php in PHP-Update 2.7 and earlier allows remote attackers to overwrite arbitrary program variables and execute arbitrary PHP code via multiple vectors that use the extract function, as demonstrated by the (1) f, (2) newmessage, (3) newusername, (4) adminuser, and (5) permission parameters.  
Phase
Assigned (20061220)  
Votes
None (candidate not yet proposed)  
Comments