Lucene search
HistoryApr 13, 2006 - 10:02 p.m.
CVE-2006-1784
cve-2006-1784
php
remote file inclusion
admin
configset.php
sphider 1.3
7.7 High
AI Score
Confidence
Low
5.1 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:P/I:P/A:P
0.066 Low
EPSS
Percentile
93.7%
PHP remote file inclusion vulnerability in admin/configset.php in Sphider 1.3 and earlier, when register_globals is disabled, allows remote attackers to execute arbitrary PHP code via a URL in the settings_dir parameter.
| CPE | Name | Operator | Version |
|---|---|---|---|
| sphider:sphider | sphider | eq | 1.3 |
| sphider:sphider | sphider | eq | 1.3_rc1 |
| sphider:sphider | sphider | eq | 1.3_rc2 |
Related
prion
prion
Remote file inclusion
2006-04-13 22:02:00
nessus
nessus
Sphider configset.php settings_dir Parameter Remote File Inclusion
2006-04-16 00:00:00
7.7 High
AI Score
Confidence
Low
5.1 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:P/I:P/A:P
0.066 Low
EPSS
Percentile
93.7%
Related for CVE-2006-1784