Lucene search
HistoryJun 02, 2006 - 10:18 a.m.
CVE-2006-2767
cve
php
remote file inclusion
ottoman 1.1.2
register_globals
nvd
8.4 High
AI Score
Confidence
Low
5.1 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:P/I:P/A:P
0.083 Low
EPSS
Percentile
94.3%
PHP remote file inclusion vulnerability in Ottoman 1.1.2, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via the default_path parameter in (1) error.php, (2) index.php, and (3) classes/main_class.php.
| CPE | Name | Operator | Version |
|---|---|---|---|
| ottoman:ottoman | ottoman | eq | 1.1.2 |
8.4 High
AI Score
Confidence
Low
5.1 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:P/I:P/A:P
0.083 Low
EPSS
Percentile
94.3%
Related for CVE-2006-2767