Lucene search

[email protected]CVE-2006-1584

HistoryApr 02, 2006 - 9:04 p.m.

CVE-2006-1584

2006-04-0221:04:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2006-1584

unspecified vulnerability

warcraft iii

replay parser

php

remote attackers

web script

html

7.5 High

AI Score

Confidence

High

6.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

0.023 Low

EPSS

Percentile

89.5%

JSON

Unspecified vulnerability in index.php in Warcraft III Replay Parser for PHP 1.8c allows remote attackers to inject arbitrary web script or HTML via the page parameter, possibly related to fopen function calls or file uploads. NOTE: post-disclosure analysis by CVE suggests that the “page” parameter is not used in this product, and “id” might be the affected parameter.

CPENameOperatorVersion
juliusz_julas_gonera:warcraft_iii_replay_parser_phpjuliusz julas gonera warcraft iii replay parser phpeq1.8c

CPE	Name	Operator	Version
juliusz_julas_gonera:warcraft_iii_replay_parser_php	juliusz julas gonera warcraft iii replay parser php	eq	1.8c

References

www.securityfocus.com/archive/1/429535/100/0/threaded

www.securityfocus.com/bid/17334

exchange.xforce.ibmcloud.com/vulnerabilities/25686

7.5 High

AI Score

Confidence

High

6.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

0.023 Low

EPSS

Percentile

89.5%

JSON

Related for CVE-2006-1584

prion1