Lucene search
HistorySep 21, 2006 - 1:07 a.m.
CVE-2006-4918
cwe-94
php
remote code execution
security vulnerability
web application security
8.4 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.153 Low
EPSS
Percentile
95.8%
Multiple PHP remote file inclusion vulnerabilities in Simple Discussion Board 0.1.0 allow remote attackers to execute arbitrary PHP code via a URL in the (1) env_dir parameter to (a) blank.php, (b) admin.php, or © builddb.php, and the (2) script_root parameter to blank.php.
| CPE | Name | Operator | Version |
|---|---|---|---|
| simple_discussion_board:simple_discussion_board | simple discussion board | eq | 0.1.0 |
8.4 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.153 Low
EPSS
Percentile
95.8%