Lucene search

[email protected]CVE-2006-4531

HistorySep 01, 2006 - 11:04 p.m.

CVE-2006-4531

2006-09-0123:04:00

[email protected]

web.nvd.nist.gov

cve-2006-4531

php

remote file inclusion

lib/config.php

pheap cms 1.1

nvd

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.5 High

AI Score

Confidence

High

0.106 Low

EPSS

Percentile

95.1%

JSON

PHP remote file inclusion vulnerability in lib/config.php in Pheap CMS 1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the lpref parameter.

Affected configurations

NVD

Node

bare_concept_mediapheap_cmsRange≤1.1

CPENameOperatorVersion
bare_concept_media:pheap_cmsbare concept media pheap cmsle1.1

CPE	Name	Operator	Version
bare_concept_media:pheap_cms	bare concept media pheap cms	le	1.1

References

pheap.barekoncept.com/

secunia.com/advisories/21678

securitytracker.com/id?1016774

www.osvdb.org/28302

www.securityfocus.com/archive/1/444882/100/0/threaded

www.securityfocus.com/bid/19775

www.vupen.com/english/advisories/2006/3426

exchange.xforce.ibmcloud.com/vulnerabilities/28684

www.exploit-db.com/exploits/2281

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.5 High

AI Score

Confidence

High

0.106 Low

EPSS

Percentile

95.1%

JSON

Related for CVE-2006-4531

cvelist2 nvd2 cve1