Lucene search

[email protected]CVE-2006-4050

HistoryAug 10, 2006 - 12:04 a.m.

CVE-2006-4050

2006-08-1000:04:00

[email protected]

web.nvd.nist.gov

cve-2006-4050

nvd

file inclusion

phpama

security vulnerability

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.9 High

AI Score

Confidence

Low

0.098 Low

EPSS

Percentile

94.9%

JSON

PHP remote file inclusion vulnerability in auto_check_renewals.php in phpAutoMembersArea (phpAMA) 3.2.4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the installed_config_file parameter.

Affected configurations

NVD

Node

david_walkerphpautomembersareaRange≤3.2.4

david_walkerphpautomembersareaMatch3.2

david_walkerphpautomembersareaMatch3.2.1

david_walkerphpautomembersareaMatch3.2.2

david_walkerphpautomembersareaMatch3.2.3

CPENameOperatorVersion
david_walker:phpautomembersareadavid walker phpautomembersareale3.2.4
david_walker:phpautomembersareadavid walker phpautomembersareaeq3.2
david_walker:phpautomembersareadavid walker phpautomembersareaeq3.2.1
david_walker:phpautomembersareadavid walker phpautomembersareaeq3.2.2
david_walker:phpautomembersareadavid walker phpautomembersareaeq3.2.3

CPE	Name	Operator	Version
david_walker:phpautomembersarea	david walker phpautomembersarea	le	3.2.4
david_walker:phpautomembersarea	david walker phpautomembersarea	eq	3.2
david_walker:phpautomembersarea	david walker phpautomembersarea	eq	3.2.1
david_walker:phpautomembersarea	david walker phpautomembersarea	eq	3.2.2
david_walker:phpautomembersarea	david walker phpautomembersarea	eq	3.2.3

References

dwalker.co.uk/forum/viewtopic.php?t=517

secunia.com/advisories/21373

securityreason.com/securityalert/1352

www.securityfocus.com/archive/1/442242/100/0/threaded

www.securityfocus.com/bid/19354

www.vupen.com/english/advisories/2006/3170

exchange.xforce.ibmcloud.com/vulnerabilities/28233

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.9 High

AI Score

Confidence

Low

0.098 Low

EPSS

Percentile

94.9%

JSON

Related for CVE-2006-4050

cvelist1 nvd1