Lucene search
MitreCVE-2006-4920HistorySep 21, 2006 - 1:07 a.m.
CVE-2006-4920
2006-09-2101:07:00
mitre
web.nvd.nist.gov
22
cve-2006-4920
php
remote file inclusion
site@school
s@s
security vulnerability
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.6
Confidence
Low
EPSS
0.043
Percentile
92.4%
Multiple PHP remote file inclusion vulnerabilities in Site@School (S@S) 2.4.02 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the cmsdir parameter to (1) starnet/modules/sn_allbum/slideshow.php, and (2) starnet/themes/editable/main.inc.php.
Affected configurations
Node
siteatschoolsiteatschoolRange≤2.4.02
| Vendor | Product | Version | CPE |
|---|---|---|---|
| siteatschool | siteatschool | cpe:/a:siteatschool:siteatschool:::: |
Related
cvelist
cvelist
CVE-2006-4920
2006-09-21 01:00:00
CVE-2007-5840
2007-11-06 21:00:00
nvd
nvd
CVE-2006-4920
2006-09-21 01:07:00
CVE-2007-5840
2007-11-06 21:46:00
cve
cve
CVE-2007-5840
2007-11-06 21:46:00
prion
prion
Remote file inclusion
2007-11-06 21:46:00
nessus
nessus
Site@School Multiple Script cmsdir Parameter Remote File Inclusion
2006-09-16 00:00:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.6
Confidence
Low
EPSS
0.043
Percentile
92.4%
Related for CVE-2006-4920