Lucene search

K
cve[email protected]CVE-2006-3773
HistoryJul 24, 2006 - 12:19 p.m.

CVE-2006-3773

2006-07-2412:19:00
CWE-94
web.nvd.nist.gov
288
cve-2006-3773
php
remote file inclusion
vulnerability
smf-forum
joomla!
mambo 4.5.3+
nvd

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.6 High

AI Score

Confidence

High

0.085 Low

EPSS

Percentile

94.5%

PHP remote file inclusion vulnerability in smf.php in the SMF-Forum 1.3.1.3 Bridge Component (com_smf) For Joomla! and Mambo 4.5.3+ allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.

Affected configurations

NVD
Node
mambosmf-forumMatch1.3.1.3_bridge_component

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.6 High

AI Score

Confidence

High

0.085 Low

EPSS

Percentile

94.5%