Lucene search

[email protected]CVE-2006-5105

HistoryOct 03, 2006 - 4:03 a.m.

CVE-2006-5105

2006-10-0304:03:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2006-5105

syntaxcms

remote file inclusion

php

vulnerability

nvd

7.9 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.012 Low

EPSS

Percentile

84.7%

JSON

Multiple PHP remote file inclusion vulnerabilities in SyntaxCMS 1.1.1 through 1.3 allow remote attackers to execute arbitrary PHP code via a URL in (1) the init_path parameter to admin/testing/tests/0030_init_syntax.php, or (2) an unspecified parameter to admin/testing/index.php. NOTE: the 0004_init_urls.php vector is already covered by CVE-2006-5055.

CPENameOperatorVersion
forum_one:syntaxcmsforum one syntaxcmseq1.1.1
forum_one:syntaxcmsforum one syntaxcmseq1.2.1
forum_one:syntaxcmsforum one syntaxcmseq1.3

CPE	Name	Operator	Version
forum_one:syntaxcms	forum one syntaxcms	eq	1.1.1
forum_one:syntaxcms	forum one syntaxcms	eq	1.2.1
forum_one:syntaxcms	forum one syntaxcms	eq	1.3

References

secunia.com/advisories/22067

www.syntaxcms.org/content/article/detail/513

exchange.xforce.ibmcloud.com/vulnerabilities/29122

7.9 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.012 Low

EPSS

Percentile

84.7%

JSON

Related for CVE-2006-5105

cve1