Lucene search
HistoryApr 19, 2006 - 4:06 p.m.
CVE-2006-1831
cve-2006-1831
code injection
sysinfo
vulnerability
remote execution
phpinfo
nvd
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8 High
AI Score
Confidence
Low
0.01 Low
EPSS
Percentile
83.5%
Direct static code injection vulnerability in sysinfo.cgi in sysinfo 1.21 and possibly other versions before 2.25 allows remote attackers to execute arbitrary commands via a leading ; (semicolon) in the name parameter in a systemdoc action, which is injected into phpinfo.php.
Affected configurations
Node
coder-worldsysinfoMatch1.21
| CPE | Name | Operator | Version |
|---|---|---|---|
| coder-world:sysinfo | coder-world sysinfo | eq | 1.21 |
Related
nessus
nessus
Sysinfo name Parameter Arbitrary Code Execution
2006-04-17 00:00:00
cvelist
cvelist
CVE-2006-1831
2006-04-19 16:00:00
prion
prion
Code injection
2006-04-19 16:06:00
nvd
nvd
CVE-2006-1831
2006-04-19 16:06:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8 High
AI Score
Confidence
Low
0.01 Low
EPSS
Percentile
83.5%
Related for CVE-2006-1831