Lucene search

K
cve[email protected]CVE-2006-4669
HistorySep 09, 2006 - 12:04 a.m.

CVE-2006-4669

2006-09-0900:04:00
NVD-CWE-Other
web.nvd.nist.gov
25
cve-2006-4669
php
remote file inclusion
somery 0.4.6
vulnerability
nvd

7.7 High

AI Score

Confidence

Low

5.1 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.016 Low

EPSS

Percentile

87.1%

PHP remote file inclusion vulnerability in admin/system/include.php in Somery 0.4.6 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the skindir parameter.

CPENameOperatorVersion
somery:somerysomeryle0.4.6

7.7 High

AI Score

Confidence

Low

5.1 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.016 Low

EPSS

Percentile

87.1%

Related for CVE-2006-4669