Lucene search

K
cve[email protected]CVE-2006-2098
HistoryOct 03, 2022 - 4:21 p.m.

CVE-2006-2098

2022-10-0316:21:35
web.nvd.nist.gov
22
php
remote file inclusion
vulnerability
thumbnail autoindex
cve-2006-2098
nvd

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.7 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

74.7%

PHP remote file inclusion vulnerability in Thumbnail AutoIndex before 2.0 allows remote attackers to execute arbitrary PHP code via (1) README.html or (2) HEADER.html.

Affected configurations

NVD
Node
php_thumbnail_autoindexphp_thumbnail_autoindexMatch1.0
OR
php_thumbnail_autoindexphp_thumbnail_autoindexMatch1.1
OR
php_thumbnail_autoindexphp_thumbnail_autoindexMatch1.2
OR
php_thumbnail_autoindexphp_thumbnail_autoindexMatch1.2.1
OR
php_thumbnail_autoindexphp_thumbnail_autoindexMatch1.2.2
OR
php_thumbnail_autoindexphp_thumbnail_autoindexMatch1.2.3
OR
php_thumbnail_autoindexphp_thumbnail_autoindexMatch1.2.4
OR
php_thumbnail_autoindexphp_thumbnail_autoindexMatch1.3
OR
php_thumbnail_autoindexphp_thumbnail_autoindexMatch1.4

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.7 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

74.7%

Related for CVE-2006-2098