← Database

CVE-2006-3040

HIGH CVSS: 7.5 Published: 2006-06-15 Modified: 2026-06-16

Description

PHP remote file inclusion vulnerability in talkbox.php in Amr Talkbox allows remote attackers to execute arbitrary PHP code via a URL in the direct parameter. NOTE: this issue has been disputed by CVE, since the $direct variable is set to a static value just before the include statement

Affected Platforms

Amr Talkbox Amr Talkbox

Weakness Type

NVD-CWE-Other

References