← Database

CVE-2006-4557

HIGH CVSS: 7.5 Published: 2006-09-06 Modified: 2026-06-16

Description

PHP remote file inclusion vulnerability in plugins/plugins.php in Bob Jewell Discloser 0.0.4 allows remote attackers to execute arbitrary PHP code via a URL in the type parameter. NOTE: another researcher has stated that an attacker cannot control the type parameter. As of 20060901, CVE analysis concurs with the dispute

Affected Platforms

Robert Jewell Discloser

Weakness Type

NVD-CWE-Other

References