← Database

CVE-2006-5621

HIGH CVSS: 7.5 Published: 2006-10-31 Modified: 2026-06-16

Description

PHP remote file inclusion vulnerability in end.php in ask_rave 0.9 PR, and other versions before 0.9b, allows remote attackers to execute arbitrary PHP code via a URL in the footfile parameter.

Affected Platforms

Ask Rave Ask Rave

Weakness Type

CWE-94

References