VulnerabilityModified
CVE-2006-6863
PHP remote file inclusion vulnerability in the Enigma2 plugin (Enigma2.php) in Enigma WordPress Bridge allows remote attackers to execute arbitrary PHP code via a URL in the boarddir parameter.
CRITICAL 9.8EPSS 13.0%
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 13.0%, higher than 96% of all known CVEs. Patch or mitigate before the next change window.
Description
PHP remote file inclusion vulnerability in the Enigma2 plugin (Enigma2.php) in Enigma WordPress Bridge allows remote attackers to execute arbitrary PHP code via a URL in the boarddir parameter. NOTE: CVE disputes this issue, since $boarddir is set to a fixed value
- CVSS 3.1
- 9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 12.96% probability · 96th percentile
- CISA KEV
- Not listed
- Affected
- enigma/wordpress bridge
- Source
- cve@mitre.org
References
- http://securityreason.com/securityalert/2093
- http://securitytracker.com/id?017459
- http://www.attrition.org/pipermail/vim/2007-January/001207.html
- http://www.securityfocus.com/archive/1/455555/100/0/threaded
- http://www.securityfocus.com/bid/21826Exploit
- https://www.exploit-db.com/exploits/3051
- http://securityreason.com/securityalert/2093
- http://securitytracker.com/id?017459
- http://www.attrition.org/pipermail/vim/2007-January/001207.html
- http://www.securityfocus.com/archive/1/455555/100/0/threaded
- http://www.securityfocus.com/bid/21826Exploit
- https://www.exploit-db.com/exploits/3051
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.