Lucene search
HistorySep 21, 2006 - 1:07 a.m.
CVE-2006-4921
cve-2006-4921
php
remote file inclusion
vulnerability
site@school
s@s
arbitrary code execution
nvd
7.7 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.016 Low
EPSS
Percentile
87.3%
PHP remote file inclusion vulnerability in Site@School (S@S) 2.4.03 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the cmsdir parameter to starnet/modules/include/include.php. NOTE: some of these details are obtained from third party information.
| CPE | Name | Operator | Version |
|---|---|---|---|
| siteatschool:siteatschool | siteatschool | eq | 2.4.02 |
| siteatschool:siteatschool | siteatschool | le | 2.4.03 |
Related
cvelist
cvelist
CVE-2006-4921
2006-09-21 01:00:00
nessus
nessus
Site@School Multiple Script cmsdir Parameter Remote File Inclusion
2006-09-16 00:00:00
7.7 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.016 Low
EPSS
Percentile
87.3%
Related for CVE-2006-4921