Lucene search
HistoryAug 10, 2006 - 12:04 a.m.
CVE-2006-4062
cve-2006-4062
php
remote file inclusion
vulnerability
dmitry sheiko sapid shop
5.1 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:P/I:P/A:P
8 High
AI Score
Confidence
Low
0.012 Low
EPSS
Percentile
85.0%
PHP remote file inclusion vulnerability in usr/extensions/get_tree.inc.php in Dmitry Sheiko SAPID Shop 1.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[root_path] parameter.
Affected configurations
Node
dmitry_sheikosapid_shopRange≤1.2
| CPE | Name | Operator | Version |
|---|---|---|---|
| dmitry_sheiko:sapid_shop | dmitry sheiko sapid shop | le | 1.2 |
5.1 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:P/I:P/A:P
8 High
AI Score
Confidence
Low
0.012 Low
EPSS
Percentile
85.0%
Related for CVE-2006-4062