Lucene search

K
cve[email protected]CVE-2006-4638
HistorySep 08, 2006 - 8:04 p.m.

CVE-2006-4638

2006-09-0820:04:00
NVD-CWE-Other
web.nvd.nist.gov
22
php
remote file inclusion
vulnerability
acgv news 0.9.1
cve-2006-4638

8.3 High

AI Score

Confidence

Low

5.1 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.09 Low

EPSS

Percentile

94.5%

PHP remote file inclusion vulnerability in article.php in ACGV News 0.9.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the PathNews parameter.

CPENameOperatorVersion
acgv_news:acgv_newsacgv newsle0.9.1

8.3 High

AI Score

Confidence

Low

5.1 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.09 Low

EPSS

Percentile

94.5%