Lucene search
HistoryJun 29, 2006 - 9:05 p.m.
CVE-2006-3316
cve
2006
3316
php
remote file inclusion
phpraid
vulnerability
execute arbitrary code
url
phpraid_dir parameter
7.9 High
AI Score
Confidence
Low
5.1 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:P/I:P/A:P
0.082 Low
EPSS
Percentile
94.3%
Multiple PHP remote file inclusion vulnerabilities in phpRaid 3.0.5 allow remote attackers to execute arbitrary code via a URL in the phpraid_dir parameter to (1) logs.php and (2) users.php, a different set of vectors than CVE-2006-3116.
| CPE | Name | Operator | Version |
|---|---|---|---|
| spiffyjr:phpraid | spiffyjr phpraid | eq | 3.0.5 |
Related
cve
cve
CVE-2006-3317
2006-06-29 21:05:00
CVE-2006-3116
2006-06-29 21:05:00
securityvulns
securityvulns
Secunia Research: phpRaid SQL Injection and File Inclusion Vulnerabilities
2006-06-30 00:00:00
7.9 High
AI Score
Confidence
Low
5.1 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:P/I:P/A:P
0.082 Low
EPSS
Percentile
94.3%
Related for CVE-2006-3316