Lucene search

[email protected]CVE-2006-3966

HistoryAug 01, 2006 - 10:04 p.m.

CVE-2006-3966

2006-08-0122:04:00

CWE-94

[email protected]

web.nvd.nist.gov

cve-2006-3966

php

remote file inclusion

vulnerability

mynewsgroups

nvd

security

7.7 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.313 Low

EPSS

Percentile

96.9%

JSON

PHP remote file inclusion vulnerability in /lib/tree/layersmenu.inc.php in the PHP Layers Menu 2.3.5 package for MyNewsGroups :) 0.6b and earlier allows remote attackers to execute arbitrary PHP code via a URL in the myng_root parameter.

CPENameOperatorVersion
carlos_sanchez_valle:mynewsgroupscarlos sanchez valle mynewsgroupsle0.6b
php_layers_menu:php_layers_menuphp layers menueq2.3.5

CPE	Name	Operator	Version
carlos_sanchez_valle:mynewsgroups	carlos sanchez valle mynewsgroups	le	0.6b
php_layers_menu:php_layers_menu	php layers menu	eq	2.3.5

References

secunia.com/advisories/21263

securityreason.com/securityalert/1316

securitytracker.com/id?1016613

www.bb-pcsecurity.de/sicherheit_266.htm

www.osvdb.org/27666

www.securityfocus.com/archive/1/441734/100/0/threaded

www.securityfocus.com/bid/19258

www.vupen.com/english/advisories/2006/3073

exchange.xforce.ibmcloud.com/vulnerabilities/28091

www.exploit-db.com/exploits/2096

7.7 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.313 Low

EPSS

Percentile

96.9%

JSON

Related for CVE-2006-3966

checkpoint_advisories1