Lucene search
HistoryMay 01, 2006 - 11:02 p.m.
CVE-2006-2129
cve-2006-2129
pro publish 2.0
code injection
vulnerability
php
remote
authenticated administrators
5.5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:P/A:N
7.2 High
AI Score
Confidence
High
0.004 Low
EPSS
Percentile
73.0%
Direct static code injection vulnerability in Pro Publish 2.0 allows remote authenticated administrators to execute arbitrary PHP code by editing certain settings, which are stored in set_inc.php.
Affected configurations
Node
deltascriptspro_publishMatch2.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| deltascripts:pro_publish | deltascripts pro publish | eq | 2.0 |
Related
cvelist
cvelist
CVE-2006-2129
2006-05-01 23:00:00
nvd
nvd
CVE-2006-2129
2006-05-01 23:02:00
prion
prion
Code injection
2006-05-01 23:02:00
5.5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:P/A:N
7.2 High
AI Score
Confidence
High
0.004 Low
EPSS
Percentile
73.0%
Related for CVE-2006-2129