Lucene search

MitreCVE-2006-5077

HistorySep 29, 2006 - 12:07 a.m.

CVE-2006-5077

2006-09-2900:07:00

mitre

web.nvd.nist.gov

cve-2006-5077

php

remote file inclusion

admin_topic_action_logging

chris smith minerva build 238

nvd

CVSS2

5.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

AI Score

Confidence

Low

EPSS

0.093

Percentile

94.7%

JSON

PHP remote file inclusion vulnerability in admin/admin_topic_action_logging.php in Chris Smith Minerva Build 238 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.

Affected configurations

Nvd

Node

minervaminervaMatch2.0.8

minervaminervaMatch2.0.19

minervaminervaMatch2.0.21

VendorProductVersionCPE
minervaminerva2.0.8cpe:2.3:a:minerva:minerva:2.0.8:*:*:*:*:*:*:*
minervaminerva2.0.19cpe:2.3:a:minerva:minerva:2.0.19:*:*:*:*:*:*:*
minervaminerva2.0.21cpe:2.3:a:minerva:minerva:2.0.21:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
minerva	minerva	2.0.8	cpe:2.3:a:minerva:minerva:2.0.8:::::::*
minerva	minerva	2.0.19	cpe:2.3:a:minerva:minerva:2.0.19:::::::*
minerva	minerva	2.0.21	cpe:2.3:a:minerva:minerva:2.0.21:::::::*

References

secunia.com/advisories/22256

www.securityfocus.com/bid/20185

www.vupen.com/english/advisories/2006/3880

exchange.xforce.ibmcloud.com/vulnerabilities/29148

www.exploit-db.com/exploits/2429

CVSS2

5.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

AI Score

Confidence

Low

EPSS

0.093

Percentile

94.7%

JSON

Related for CVE-2006-5077