CVE-2006-0940

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.3% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-03-01 · updated 2026-06-16

Description

Multiple direct static code injection vulnerabilities in savesettings.php in ShoutLIVE 1.1.0 allow remote attackers to execute arbitrary PHP code via variables that are written to settings.php.

Affected products

Cynical Games Shoutlive: 1.1.0

References

http://evuln.com/vulns/87/summary.html
http://secunia.com/advisories/19047
http://securityreason.com/securityalert/557
http://www.osvdb.org/23482
http://www.securityfocus.com/archive/1/426985/100/0/threaded
http://www.securityfocus.com/bid/16857
http://www.vupen.com/english/advisories/2006/0755
https://exchange.xforce.ibmcloud.com/vulnerabilities/24897
http://evuln.com/vulns/87/summary.html
http://secunia.com/advisories/19047
http://securityreason.com/securityalert/557
http://www.osvdb.org/23482

Get alerted when CVE-2006-0940 or the next vulnerability affects your stack