Unrated severityNVD Advisory· Published Jun 9, 2006· Updated Jun 16, 2026
CVE-2006-2921
CVE-2006-2921
Description
PHP remote file inclusion vulnerability in cmpro_header.inc.php in Clan Manager Pro (CMPRO) 1.1 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the (1) cm_ext_server and (2) sitepath parameters.
Affected products
1- cpe:2.3:a:cmpro_team:clan_manager_pro:1.1:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
4- secunia.com/advisories/20480nvdPatchVendor Advisory
- sx02.coresec.de/advisories/149.txtnvdExploit
- www.vupen.com/english/advisories/2006/2166nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/27058nvd
News mentions
0No linked articles in our index yet.