CVE-2006-4311
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8 High
AI Score
Confidence
Low
0.095 Low
EPSS
Percentile
94.8%
PHP remote file inclusion vulnerability in Sonium Enterprise Adressbook 0.2 allows remote attackers to execute arbitrary PHP code via the folder parameter in multiple files in the plugins directory, as demonstrated by plugins/1_Adressbuch/delete.php.
Affected configurations
| CPE | Name | Operator | Version |
|---|---|---|---|
| sonium:enterprise_adressbook | sonium enterprise adressbook | eq | 0.2 |
References
secunia.com/advisories/21553
www.bb-pcsecurity.de/Websecurity/342/org/Sonium_Enterprise_Adressbook_Version_0.2_%28folder%29_RFI.htm
www.securityfocus.com/archive/1/443701/100/0/threaded
www.securityfocus.com/bid/19597
www.vupen.com/english/advisories/2006/3334
exchange.xforce.ibmcloud.com/vulnerabilities/28464
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8 High
AI Score
Confidence
Low
0.095 Low
EPSS
Percentile
94.8%