Lucene search

[email protected]CVE-2006-4166

HistoryAug 16, 2006 - 10:04 p.m.

CVE-2006-4166

2006-08-1622:04:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2006-4166

php remote file inclusion

tinywebgallery

vulnerability

nvd

8.3 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.147 Low

EPSS

Percentile

95.7%

JSON

PHP remote file inclusion vulnerability in TinyWebGallery 1.5 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the image parameter to (1) image.php or (2) image.php2.

CPENameOperatorVersion
tinywebgallery:tinywebgallerytinywebgalleryeq1.3
tinywebgallery:tinywebgallerytinywebgalleryle1.5
tinywebgallery:tinywebgallerytinywebgalleryeq1.4

CPE	Name	Operator	Version
tinywebgallery:tinywebgallery	tinywebgallery	eq	1.3
tinywebgallery:tinywebgallery	tinywebgallery	le	1.5
tinywebgallery:tinywebgallery	tinywebgallery	eq	1.4

References

securityreason.com/securityalert/1393

securitytracker.com/id?1016682

www.securityfocus.com/archive/1/442818/100/0/threaded

www.securityfocus.com/archive/1/443353/100/0/threaded

www.securityfocus.com/archive/1/445089/100/0/threaded

exchange.xforce.ibmcloud.com/vulnerabilities/28317

www.exploit-db.com/exploits/2158

8.3 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.147 Low

EPSS

Percentile

95.7%

JSON