Lucene search

K
cve[email protected]CVE-2006-4893
HistorySep 19, 2006 - 10:07 p.m.

CVE-2006-4893

2006-09-1922:07:00
NVD-CWE-Other
web.nvd.nist.gov
101
cve-2006-4893
php
remote file inclusion
bb_usage_stats
phpbb xs 0.58
nvd

7.7 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.08 Low

EPSS

Percentile

94.2%

PHP remote file inclusion vulnerability in bb_usage_stats/includes/bb_usage_stats.php in phpBB XS 0.58 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter, a different vector than CVE-2006-4780.

CPENameOperatorVersion
phpbb_xs:phpbb_xsphpbb xsle0.58

7.7 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.08 Low

EPSS

Percentile

94.2%

Related for CVE-2006-4893