VULNERABILITY INTELLIGENCE

CVE-2006-0940

CVSS score7.5 HIGH

EPSS probability3.35%

CISA KEVNot currently listed

Published2006-03-01

Last modified2026-06-16

Description

Multiple direct static code injection vulnerabilities in savesettings.php in ShoutLIVE 1.1.0 allow remote attackers to execute arbitrary PHP code via variables that are written to settings.php.