CVE-2006-1477

N/A Unknown
Published: March 29, 2006 Modified: April 16, 2026
View on NVD

Description

Multiple PHP remote file inclusion vulnerabilities in Turnkey Web Tools PHP Live Helper 1.8 allow remote attackers to include and execute arbitrary PHP code via the abs_path parameter in (1) initiate.php, (2) waiting.php, (3) welcome.php, (4) admin/index.php, (5) javascript.php, (6) checkchat.php, and (7) blank.php.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

Login to generate AI explanation

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory
http://secunia.com/advisories/19428
Source: cve@mitre.org
Exploit Vendor Advisory
http://www.osvdb.org/24193
Source: cve@mitre.org
http://www.osvdb.org/24194
Source: cve@mitre.org
http://www.osvdb.org/24195
Source: cve@mitre.org
http://www.osvdb.org/24196
Source: cve@mitre.org
http://www.osvdb.org/24197
Source: cve@mitre.org
http://www.osvdb.org/24198
Source: cve@mitre.org
http://www.osvdb.org/24199
Source: cve@mitre.org
http://www.securityfocus.com/archive/1/428976/100/0/threaded
Source: cve@mitre.org
http://www.securityfocus.com/archive/1/437648/100/0/threaded
Source: cve@mitre.org
http://www.securityfocus.com/archive/1/437741/100/0/threaded
Source: cve@mitre.org
http://www.securityfocus.com/bid/18509
Source: cve@mitre.org
http://www.turnkeywebtools.com/forum/showthread.php?p=10415
Source: cve@mitre.org
Patch
http://www.vupen.com/english/advisories/2006/1137
Source: cve@mitre.org
http://www.worlddefacers.de/Public/WD-TMPLH.txt
Source: cve@mitre.org
Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/25489
Source: cve@mitre.org
http://secunia.com/advisories/19428
Source: af854a3a-2127-422b-91ae-364da2661108
Exploit Vendor Advisory
http://www.osvdb.org/24193
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.osvdb.org/24194
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.osvdb.org/24195
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.osvdb.org/24196
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.osvdb.org/24197
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.osvdb.org/24198
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.osvdb.org/24199
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.securityfocus.com/archive/1/428976/100/0/threaded
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.securityfocus.com/archive/1/437648/100/0/threaded
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.securityfocus.com/archive/1/437741/100/0/threaded
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.securityfocus.com/bid/18509
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.turnkeywebtools.com/forum/showthread.php?p=10415
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
http://www.vupen.com/english/advisories/2006/1137
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.worlddefacers.de/Public/WD-TMPLH.txt
Source: af854a3a-2127-422b-91ae-364da2661108
Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/25489
Source: af854a3a-2127-422b-91ae-364da2661108

32 reference(s) from NVD

Quick Stats

CVSS v3 Score
N/A / 10.0
EPSS (Exploit Probability)
6.1%
91th percentile
Exploitation Status
Not in CISA KEV

Affected Vendors

turnkey_web_tools