CVE-2006-4870

None

CVSS

—

EPSS

10.1%

Published

Sep 19, 2006

CISA due date

—

The record

Multiple PHP remote file inclusion vulnerabilities in AEDating 4.1, and possibly earlier versions, allow remote attackers to execute arbitrary PHP code via a URL in the dir[inc] parameter in (1) inc/design.inc.php or (2) inc/admin_design.inc.php.

Affected packages

Ecosystem	Package	Introduced	Fixed