Lucene search

K
cve[email protected]CVE-2006-1013
HistoryMar 07, 2006 - 12:02 a.m.

CVE-2006-1013

2006-03-0700:02:00
web.nvd.nist.gov
19
cve-2006-1013
php
remote file include
smartblog
smblog 1.2
vulnerability
nvd

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.4 High

AI Score

Confidence

High

0.058 Low

EPSS

Percentile

93.4%

PHP remote file include vulnerability in index.php in SMartBlog (aka SMBlog) 1.2 allows remote attackers to include and execute arbitrary PHP files via (1) the pg parameter and (2) a query string without a parameter.

Affected configurations

NVD
Node
smartblogsmartblogMatch1.2
CPENameOperatorVersion
smartblog:smartblogsmartblogeq1.2

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.4 High

AI Score

Confidence

High

0.058 Low

EPSS

Percentile

93.4%

Related for CVE-2006-1013