CVEs-PoC/2006/CVE-2006-7006.md

CVE-2006-7006

Description

PHP remote file inclusion vulnerability in upload/admin/team.php in Robin de Graff Somery 0.4.4 allows remote attackers to execute arbitrary PHP code via a URL in the checkauth parameter. NOTE: CVE disputes this vulnerability because the checkauth parameter is only used in conditionals

POC

Reference

• http://packetstorm.linuxsecurity.com/0606-exploits/Somery.txt

Github

No PoCs found on GitHub currently.