Lucene search
HistoryMay 03, 2006 - 10:02 a.m.
CVE-2006-2152
cve-2006-2152
php
remote file inclusion
admin
addentry.php
phpbb
advanced guestbook 2.4.0
vulnerability
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
6.9 Medium
AI Score
Confidence
High
0.1 Low
EPSS
Percentile
95.0%
PHP remote file inclusion vulnerability in admin/addentry.php in phpBB Advanced Guestbook 2.4.0 and earlier, when register_globals is enabled, allows remote attackers to include arbitrary files via the phpbb_root_path parameter.
Affected configurations
Node
phpbb_groupphpbb_advanced_guestbookRange≤2.4.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| phpbb_group:phpbb_advanced_guestbook | phpbb group phpbb advanced guestbook | le | 2.4.0 |
Related
cvelist
cvelist
CVE-2006-2152
2006-05-03 10:00:00
nessus
nessus
prion
prion
Remote file inclusion
2006-05-03 10:02:00
nvd
nvd
CVE-2006-2152
2006-05-03 10:02:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
6.9 Medium
AI Score
Confidence
High
0.1 Low
EPSS
Percentile
95.0%
Related for CVE-2006-2152