Lucene search
HistoryMar 14, 2006 - 1:06 a.m.
CVE-2006-1200
cve-2006-1200
code injection
daverave link bank
remote attackers
php code
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.6 High
AI Score
Confidence
Low
0.023 Low
EPSS
Percentile
89.7%
Direct static code injection vulnerability in add_link.txt in daverave Link Bank allows remote attackers to execute arbitrary PHP code via the url_name parameter, which is not sanitized before being stored in links.txt, which is later used in an include statement.
Affected configurations
Node
daveravelink_bank
| CPE | Name | Operator | Version |
|---|---|---|---|
| daverave:link_bank | daverave link bank | eq | * |
Related
prion
prion
Code injection
2006-03-14 01:06:00
nvd
nvd
CVE-2006-1200
2006-03-14 01:06:00
cvelist
cvelist
CVE-2006-1200
2006-03-14 01:00:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.6 High
AI Score
Confidence
Low
0.023 Low
EPSS
Percentile
89.7%
Related for CVE-2006-1200