PT-2006-6264 · Adobe · Php Sdk

Crackers_Child · Published 2006-10-26 · Updated 2024-08-07 · CVE-2006-5549

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Adobe PHP SDK (affected versions not specified)

Description: A remote file inclusion issue in the Adobe PHP SDK allows remote attackers to execute arbitrary PHP code via the AMFPHP BASE parameter in the CachedGateway.php file. This issue has been disputed by a third-party researcher who claims that AMFPHP BASE is a constant.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2006-5549

Affected Products

Php Sdk

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2006-5549 · Security Note
• http://securityfocus.com/archive/1/449576/100/0/threaded · Note
• http://securityfocus.com/archive/1/449616/100/0/threaded · Note
• http://securityreason.com/securityalert/1784 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/29776 · Note