CVE-2006-2962

Description

PHP remote file inclusion vulnerability in sql_fcnsOLD.php in Emergenices Personnel Information System (Empris) 20020923 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phormationdir parameter.

References

https://www.exploit-db.com/exploits/1895

https://exchange.xforce.ibmcloud.com/vulnerabilities/27048

http://www.securityfocus.com/bid/18371

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS