Lucene search
MitreCVE-2006-5067HistorySep 28, 2006 - 12:07 a.m.
CVE-2006-5067
2006-09-2800:07:00
mitre
web.nvd.nist.gov
24
cve-2006-5067
php
remote file inclusion
php system administration toolkit
phpsatk
loader.php
vulnerability
nvd
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.8
Confidence
Low
EPSS
0.016
Percentile
87.3%
PHP remote file inclusion vulnerability in loader.php in PHP System Administration Toolkit (PHPSaTK) allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[config] parameter. NOTE: this issue is disputed by CVE; analysis shows that the GLOBALS[config] variable is initialized before being used
Affected configurations
Node
php_system_administration_toolkitphp_system_administration_toolkit
| Vendor | Product | Version | CPE |
|---|---|---|---|
| php_system_administration_toolkit | php_system_administration_toolkit | * | cpe:2.3:a:php_system_administration_toolkit:php_system_administration_toolkit:*:*:*:*:*:*:*:* |
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.8
Confidence
Low
EPSS
0.016
Percentile
87.3%
Related for CVE-2006-5067