Lucene search
MitreCVE-2006-0169HistoryJan 11, 2006 - 9:03 p.m.
CVE-2006-0169
2006-01-1121:03:00
mitre
web.nvd.nist.gov
21
myphpim
remote code execution
file upload vulnerability
cve-2006-0169
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.6
Confidence
High
EPSS
0.019
Percentile
88.5%
addresses.php3 in MyPhPim 01.05 does not restrict uploaded files, which allows remote attackers to execute arbitrary PHP code via the pdbfile variable, then directly accessing those files from the uploads directory.
Affected configurations
Node
myphpimmyphpimMatch01.05
Related
nvd
nvd
CVE-2006-0169
2006-01-11 21:03:00
cvelist
cvelist
CVE-2006-0169
2006-01-11 21:00:00
prion
prion
Directory traversal
2006-01-11 21:03:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.6
Confidence
High
EPSS
0.019
Percentile
88.5%
Related for CVE-2006-0169