Lucene search

MitreCVE-2006-3396

HistoryJul 06, 2006 - 8:05 p.m.

CVE-2006-3396

2006-07-0620:05:00

CWE-94

mitre

web.nvd.nist.gov

310

cve-2006-3396

php

remote file inclusion

vulnerability

galleria mambo module

nvd

mambo

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.6

Confidence

High

EPSS

0.241

Percentile

96.6%

JSON

PHP remote file inclusion vulnerability in galleria.html.php in Galleria Mambo Module 1.0 and earlier for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.

Affected configurations

Nvd

Node

miro_internationalgalleriaMatch1.0_for_mambo

VendorProductVersionCPE
miro_internationalgalleria1.0_for_mambocpe:2.3:a:miro_international:galleria:1.0_for_mambo:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
miro_international	galleria	1.0_for_mambo	cpe:2.3:a:miro_international:galleria:1.0_for_mambo:::::::*

References

secunia.com/advisories/20949

securityreason.com/securityalert/1197

securitytracker.com/id?1016437

www.osvdb.org/27010

www.securityfocus.com/archive/1/439035/100/0/threaded

www.securityfocus.com/archive/1/439624/100/0/threaded

www.securityfocus.com/bid/18808

www.vupen.com/english/advisories/2006/2666

exchange.xforce.ibmcloud.com/vulnerabilities/27528

www.exploit-db.com/exploits/1981

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.6

Confidence

High

EPSS

0.241

Percentile

96.6%

JSON

Related for CVE-2006-3396