Lucene search
HistoryApr 19, 2006 - 4:06 p.m.
CVE-2006-1839
cve
2006
1839
php
remote file inclusion
vulnerability
ftp url
data_dir parameter
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.7 High
AI Score
Confidence
High
0.139 Low
EPSS
Percentile
95.7%
PHP remote file inclusion vulnerability in language.php in PHP Album 0.3.2.3, when register_globals is enabled, allows remote attackers to execute arbitrary code via an FTP URL in the data_dir parameter, which satisfies the file_exists function call.
Affected configurations
Node
php_albumphp_albumMatch0.3.2.3
| CPE | Name | Operator | Version |
|---|---|---|---|
| php_album:php_album | php album | eq | 0.3.2.3 |
Related
nvd
nvd
CVE-2006-1839
2006-04-19 16:06:00
prion
prion
Remote file inclusion
2006-04-19 16:06:00
nessus
nessus
phpAlbum language.php data_dir Parameter Remote File Inclusion
2006-04-17 00:00:00
cvelist
cvelist
CVE-2006-1839
2006-04-19 16:00:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.7 High
AI Score
Confidence
High
0.139 Low
EPSS
Percentile
95.7%
Related for CVE-2006-1839