← Database

CVE-2006-0945

MEDIUM CVSS: 6.5 Published: 2006-03-01 Modified: 2026-06-16

Description

PHP remote file include vulnerability in admin/index.php in Archangel Weblog 0.90.02 allows remote authenticated administrators to execute arbitrary PHP code via a URL ending in a NULL (%00) in the index parameter.

Affected Platforms

Archangelmgt Weblog

Weakness Type

CWE-94

References