virus logo Intrusion Prevention

WebProvence.Spaw.control.class.PHP.Remote.File.Inclusion

description-logoDescription

A PHP remote file inclusion vulnerability in admin/editeur/spaw_control.class.php in Web Provence SL_Site 1.0 and earlier, allows remote attackers to execute arbitrary PHP code via a URL in the spaw_root parameter.

affected-products-logoAffected Products

Web-Provence SL_site 1.0

Impact logoImpact

Execute arbitrary PHP code.

recomended-action-logoRecommended Actions

Currently we are not aware of any vendor-supplied patches for this issue.

Telemetry logoTelemetry

Coverage

IPS (Regular DB)
IPS (Extended DB)

References

http://spaw.cvs.sourceforge.net/spaw/spaw/spaw_control.class.php?r1=1.19&r2=1.20 http://www.securityfocus.com/archive/1/archive/1/445520/100/0/threaded
ID 14058
Created Feb 12, 2007
Updated Nov 15, 2021
Risk black-background-circle-icon black-background-circle-icon black-background-circle-icon lightgray-background-circle-icon lightgray-background-circle-icon
CVE ID CVE-2006-4656
Exploit Prediction Score 4.62%
Default Action drop
Active
Affected OS Windows, Linux, BSD, Solaris, MacOS
Affected App PHP_app