Unknown · Phpirc Bot · CVE-2006-6883
Name of the Vulnerable Software and Affected Versions:
PHPIrc bot version 0.2
Description:
A remote file inclusion issue in the php4you.php file allows remote attackers to execute arbitrary PHP code via a URL in the `dir` parameter.
Recommendations:
For PHPIrc bot version 0.2, consider validating and sanitizing the `dir` parameter to prevent remote file inclusion attacks. As a temporary workaround, restrict access to the php4you.php file until a proper fix is applied.