Lucene search

K
cve[email protected]CVE-2006-4649
HistorySep 08, 2006 - 9:04 p.m.

CVE-2006-4649

2006-09-0821:04:00
CWE-94
web.nvd.nist.gov
29
cve-2006-4649
php
remote file inclusion
bp_news.php
bingo news
bp news
security vulnerability
nvd

7.7 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.011 Low

EPSS

Percentile

83.9%

PHP remote file inclusion vulnerability in bp_news.php in BinGo News (BP News) 3.01 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the bnrep parameter.

CPENameOperatorVersion
bingo_news:bingo_newsbingo newsle3.01

7.7 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.011 Low

EPSS

Percentile

83.9%

Related for CVE-2006-4649