Lucene search

[email protected]CVE-2006-4594

HistorySep 06, 2006 - 10:04 p.m.

CVE-2006-4594

2006-09-0622:04:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2006-4594

php

remote file inclusion

phpatm

vulnerability

security

nvd

7.8 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.008 Low

EPSS

Percentile

81.8%

JSON

Multiple PHP remote file inclusion vulnerabilities in PHP Advanced Transfer Manager (phpAtm) 1.21 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the include_location parameter in (1) confirm.php or (2) login.php. NOTE: the include_location parameter to index.php is already covered by CVE-2005-1681.

CPENameOperatorVersion
bugada_andrea:php_advanced_transfer_managerbugada andrea php advanced transfer managereq1.20
bugada_andrea:php_advanced_transfer_managerbugada andrea php advanced transfer managerle1.21

CPE	Name	Operator	Version
bugada_andrea:php_advanced_transfer_manager	bugada andrea php advanced transfer manager	eq	1.20
bugada_andrea:php_advanced_transfer_manager	bugada andrea php advanced transfer manager	le	1.21

References

www.securityfocus.com/bid/19765

exchange.xforce.ibmcloud.com/vulnerabilities/28670

www.exploit-db.com/exploits/2279

7.8 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.008 Low

EPSS

Percentile

81.8%

JSON

Related for CVE-2006-4594

cve2 nessus1