CVE-2006-6023 - CVE House
Back to Database
Status published High CVE-2006-6023

PHP remote file inclusion vulnerability in phoo.base.php in Bill Roberts...

Vulnerability Description

PHP remote file inclusion vulnerability in phoo.base.php in Bill Roberts Bloo 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the descriptorFileList parameter. NOTE: this issue is disputed by CVE since $descriptorFileList is used in a function definition within phoo.base.php

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2006-6023

Credits & Attribution

No credits recorded in the NVD database.

References

More from bloo

View All →
CVE-2008-0427
Directory traversal vulnerability in file.php in bloofoxCMS 0.3 allows remote...
High 7.8
CVE-2006-6019
Cross-site scripting (XSS) vulnerability in extensions/googiespell/googlespell_proxy.php in Bill Roberts Bloo...
Medium 6.8

Affected Vendor

Affected Software

bloo
Vulnerable Versions:
1.0

Timeline

Official Publish: November 21st, 2006
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.