Cloudanix VulnDB

CVE-2006-6863

Critical · 9.8

CVSS

9.8

EPSS

13.1%

Published

Dec 31, 2006

CISA due date

—

The record

PHP remote file inclusion vulnerability in the Enigma2 plugin (Enigma2.php) in Enigma WordPress Bridge allows remote attackers to execute arbitrary PHP code via a URL in the boarddir parameter. NOTE: CVE disputes this issue, since $boarddir is set to a fixed value

Affected packages

Ecosystem Package Introduced Fixed