Lucene search

[email protected]CVE-2006-1243

HistoryMar 15, 2006 - 5:06 p.m.

CVE-2006-1243

2006-03-1517:06:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2006-1243

directory traversal

simple php blog

spb

remote attackers

arbitrary file execution

nvd

7.4 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.025 Low

EPSS

Percentile

90.1%

JSON

Directory traversal vulnerability in install05.php in Simple PHP Blog (SPB) 0.4.7.1 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences and a NUL (%00) character in the blog_language parameter, as demonstrated by injecting PHP sequences into an Apache access_log file, which is then included using install05.php.

CPENameOperatorVersion
alexander_palmo:simple_php_blogalexander palmo simple php blogeq0.4.7
alexander_palmo:simple_php_blogalexander palmo simple php blogeq0.4.6
alexander_palmo:simple_php_blogalexander palmo simple php blogle0.4.7.1
alexander_palmo:simple_php_blogalexander palmo simple php blogeq0.4.5
alexander_palmo:simple_php_blogalexander palmo simple php blogeq0.4.0

CPE	Name	Operator	Version
alexander_palmo:simple_php_blog	alexander palmo simple php blog	eq	0.4.7
alexander_palmo:simple_php_blog	alexander palmo simple php blog	eq	0.4.6
alexander_palmo:simple_php_blog	alexander palmo simple php blog	le	0.4.7.1
alexander_palmo:simple_php_blog	alexander palmo simple php blog	eq	0.4.5
alexander_palmo:simple_php_blog	alexander palmo simple php blog	eq	0.4.0

References

secunia.com/advisories/19270

sourceforge.net/forum/forum.php?forum_id=564904

www.attrition.org/pipermail/vim/2006-November/001138.html

www.securityfocus.com/bid/17102

www.vupen.com/english/advisories/2006/1007

exchange.xforce.ibmcloud.com/vulnerabilities/25322

www.exploit-db.com/exploits/1581

7.4 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.025 Low

EPSS

Percentile

90.1%

JSON

Related for CVE-2006-1243

cvelist1 nessus1 prion1