CVEs-PoC/2006/CVE-2006-4966.md

CVE-2006-4966

Description

PHP remote file inclusion vulnerability in inc/ifunctions.php in chumpsoft phpQuestionnaire (phpQ) 3.12 allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[phpQRootDir] parameter.

POC

Reference

• http://securityreason.com/securityalert/1630
• http://securityreason.com/securityalert/1630
• https://www.exploit-db.com/exploits/2410
• https://www.exploit-db.com/exploits/2410

Github

No PoCs found on GitHub currently.