CVE-2006-3395

Name of the Vulnerable Software and Affected Versions SiteBuilder-FX version 3.5

Description The issue allows remote attackers to execute arbitrary PHP code via a URL in the admindir parameter. This can be achieved by manipulating the URL to include malicious PHP code, which can then be executed by the server.

Recommendations For SiteBuilder-FX version 3.5, consider restricting access to the admindir parameter to prevent remote attackers from executing arbitrary PHP code until a patch is available. As a temporary workaround, avoid using the admindir parameter in the affected API endpoint until the issue is resolved.