Lucene search

[email protected]CVE-2006-3302

HistoryJun 29, 2006 - 1:05 a.m.

CVE-2006-3302

2006-06-2901:05:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve

2006

3302

php

remote file inclusion

mod_cbsms.php

cbsms

mambo module

register_globals

security vulnerability

nvd

7.5 High

AI Score

Confidence

Low

5.1 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.005 Low

EPSS

Percentile

77.2%

JSON

PHP remote file inclusion vulnerability in mod_cbsms.php in CBSMS Mambo Module 1.0 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the mosC_a_path parameter. NOTE: the provenance of this information is unknown; portions of the details are obtained from third party information.

CPENameOperatorVersion
cbsms:mambo_modulecbsms mambo modulele1.0

CPE	Name	Operator	Version
cbsms:mambo_module	cbsms mambo module	le	1.0

References

www.vupen.com/english/advisories/2006/2528

exchange.xforce.ibmcloud.com/vulnerabilities/27374

7.5 High

AI Score

Confidence

Low

5.1 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.005 Low

EPSS

Percentile

77.2%

JSON

Related for CVE-2006-3302

checkpoint_advisories1