Lucene search
HistorySep 12, 2006 - 4:07 p.m.
CVE-2006-4714
cve
2006
4714
php
remote file inclusion
vulnerability
spoonlabs
vivvo article management
cms
phpwordpress
register_globals
execute
arbitrary
url
5.1 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:P/I:P/A:P
7.9 High
AI Score
Confidence
Low
0.118 Low
EPSS
Percentile
95.4%
PHP remote file inclusion vulnerability in index.php in SpoonLabs Vivvo Article Management CMS (aka phpWordPress) 3.2 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the classified_path parameter.
Affected configurations
Node
spoonlabsvivvo_article_management_cmsRange≤3.25
ORspoonlabsvivvo_article_management_cmsMatch3.2
5.1 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:P/I:P/A:P
7.9 High
AI Score
Confidence
Low
0.118 Low
EPSS
Percentile
95.4%
Related for CVE-2006-4714