VULNERABILITY INTELLIGENCE

CVE-2006-1584

CVSS score6.4 MEDIUM
EPSS probability5.85%
CISA KEVNot currently listed
Published2006-04-02
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:N

Description

Unspecified vulnerability in index.php in Warcraft III Replay Parser for PHP 1.8c allows remote attackers to inject arbitrary web script or HTML via the page parameter, possibly related to fopen function calls or file uploads. NOTE: post-disclosure analysis by CVE suggests that the "page" parameter is not used in this product, and "id" might be the affected parameter.

Primary references