← Database

CVE-2006-6765

MEDIUM CVSS: 6.8 Published: 2006-12-27 Modified: 2026-06-16

Description

Multiple PHP file inclusion vulnerabilities in src/admin/pt_upload.php in Pagetool 1.07 allow remote attackers to execute arbitrary PHP code via (1) a local filename or FTP/share URI in the config_file parameter or (2) a URL in the ptconf[src] parameter.

Affected Platforms

Pagetool Pagetool

Weakness Type

NVD-CWE-Other

References