CVE-2006-6863

CRITICAL 9.8 CVSS 3.1

Published: December 31, 2006
Last modified: June 16, 2026
NVD status: Modified
Reported by: cve@mitre.org
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

PHP remote file inclusion vulnerability in the Enigma2 plugin (Enigma2.php) in Enigma WordPress Bridge allows remote attackers to execute arbitrary PHP code via a URL in the boarddir parameter. NOTE: CVE disputes this issue, since $boarddir is set to a fixed value

Affected products and versions

n/a n/a — Versions not specified

References

securityreason.com http://securityreason.com/securityalert/2093
securitytracker.com http://securitytracker.com/id?017459
www.attrition.org http://www.attrition.org/pipermail/vim/2007-January/001207.html
www.securityfocus.com http://www.securityfocus.com/archive/1/455555/100/0/threaded
www.securityfocus.com http://www.securityfocus.com/bid/21826 Exploit
www.exploit-db.com https://www.exploit-db.com/exploits/3051
nvd.nist.gov Official NVD record

WordPress CVEs

Description

Affected products and versions

References