PT-2006-6595 · Php · Phpjobscheduler
Published
2006-11-16
·
Updated
2008-09-05
·
CVE-2006-5929
CVSS v2.0
7.5
High
| Vector | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Phpjobscheduler version 3.0
Description
The issue allows remote attackers to execute arbitrary PHP code via a URL in the
installed config file parameter in the firepjs.php file.Recommendations
For Phpjobscheduler version 3.0, consider restricting access to the
installed config file parameter in the firepjs.php file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability. Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Phpjobscheduler