Unrated severityNVD Advisory· Published Jun 12, 2006· Updated Jun 16, 2026
CVE-2006-2964
CVE-2006-2964
Description
Multiple PHP remote file inclusion vulnerabilities in Xtreme Scripts Download Manager (aka Xtreme Downloads) 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the root parameter in (1) download.php, (2) manager.php, (3) admin/scripts/category.php, (4) includes/add_allow.php, (5) admin/index.php, and (6) admin/admin/login.php.
Affected products
2cpe:2.3:a:xtreme_scripts:download_manager:1.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:xtreme_scripts:download_manager:1.0:*:*:*:*:*:*:*
- (no CPE)range: =1.0
Patches
Vulnerability mechanics
References
10- www.osvdb.org/26643nvdExploit
- www.osvdb.org/26644nvdExploit
- www.osvdb.org/26645nvdExploit
- www.osvdb.org/26646nvdExploit
- securityreason.com/securityalert/1072nvd
- www.osvdb.org/26647nvd
- www.osvdb.org/26648nvd
- www.securityfocus.com/archive/1/436104/100/0/threadednvd
- www.securityfocus.com/archive/1/436107/100/0/threadednvd
- exchange.xforce.ibmcloud.com/vulnerabilities/26961nvd
News mentions
0No linked articles in our index yet.