CVE-2006-3527 Information

Description

Multiple PHP remote file inclusion vulnerabilities in BosClassifieds Classified Ads allow remote attackers to execute arbitrary PHP code via a URL in the insPath parameter to (1) index.php (2) recent.php (3) account.php (4) classified.php or (5) search.php.

Reference

http://secunia.com/advisories/21056 http://securitytracker.com/id?1016447 http://www.jaascois.com/exploits/18602018/ http://www.osvdb.org/27314 http://www.osvdb.org/27315 http://www.osvdb.org/27316 http://www.osvdb.org/27317 http://www.osvdb.org/27318 http://www.securityfocus.com/bid/18883 http://www.vupen.com/english/advisories/2006/2807 https://exchange.xforce.ibmcloud.com/vulnerabilities/27662