← Database

CVE-2006-0881

HIGH CVSS: 7.5 Published: 2006-02-24 Modified: 2026-06-16

Description

Multiple PHP remote file include vulnerabilities in gorum/gorumlib.php in Noah's Classifieds 1.3, when register_globals is enabled, allow remote attackers to include arbitrary PHP files via the (1) upperTemplate and (2) lowerTemplate parameters, as demonstrated using the lowerTemplate parameter to index.php.

Affected Platforms

Phpoutsourcing Noahs Classifieds

Weakness Type

NVD-CWE-Other

References