Lucene search
HistoryAug 27, 2006 - 2:04 a.m.
CVE-2006-4363
cve-2006-4363
php
remote file inclusion
admin.cropcanvas.php
cropimage component
mambo
vulnerability
nvd
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8 High
AI Score
Confidence
Low
0.086 Low
EPSS
Percentile
94.5%
PHP remote file inclusion vulnerability in admin.cropcanvas.php in the CropImage component (com_cropimage) 1.0 for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the cropimagedir parameter.
Affected configurations
Node
cropimage_componentcropimage_componentMatch1.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| cropimage_component:cropimage_component | cropimage component | eq | 1.0 |
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8 High
AI Score
Confidence
Low
0.086 Low
EPSS
Percentile
94.5%
Related for CVE-2006-4363