CVE-2006-0724
2.6 Low
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:H/Au:N/C:N/I:P/A:N
6.8 Medium
AI Score
Confidence
Low
0.023 Low
EPSS
Percentile
89.8%
profile.php in Reamday Enterprises Magic News Lite 1.2.3, when register_globals is enabled, allows remote attackers to modify program behavior, potentially bypassing authentication controls, via modified (1) action, (2) passwd, (3) admin_password, (4) new_passwd, and (5) confirm_passwd variables, which are not initialized.
Affected configurations
| CPE | Name | Operator | Version |
|---|---|---|---|
| reamday_enterprises:magic_news_lite | reamday enterprises magic news lite | eq | 1.2.3 |
Related
2.6 Low
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:H/Au:N/C:N/I:P/A:N
6.8 Medium
AI Score
Confidence
Low
0.023 Low
EPSS
Percentile
89.8%