CVEs-PoC/2006/CVE-2006-5067.md

CVE-2006-5067

Description

PHP remote file inclusion vulnerability in loader.php in PHP System Administration Toolkit (PHPSaTK) allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[config] parameter. NOTE: this issue is disputed by CVE; analysis shows that the GLOBALS[config] variable is initialized before being used

POC

Reference

• http://securityreason.com/securityalert/1647

Github

No PoCs found on GitHub currently.