Lucene search

MitreCVE-2006-5155

HistoryOct 05, 2006 - 4:04 a.m.

CVE-2006-5155

2006-10-0504:04:00

mitre

web.nvd.nist.gov

cve-2006-5155

php

remote file inclusion

videodb 2.2.1

nvd

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

Confidence

Low

EPSS

0.086

Percentile

94.5%

JSON

PHP remote file inclusion vulnerability in core/pdf.php in VideoDB 2.2.1 and earlier allows remote attackers to execute arbitrary PHP code via the config[pdf_module] parameter.

Affected configurations

Nvd

Node

videodbvideodbMatch2.0.0

videodbvideodbMatch2.0.2

videodbvideodbMatch2.2.1

VendorProductVersionCPE
videodbvideodb2.0.0cpe:2.3:a:videodb:videodb:2.0.0:*:*:*:*:*:*:*
videodbvideodb2.0.2cpe:2.3:a:videodb:videodb:2.0.2:*:*:*:*:*:*:*
videodbvideodb2.2.1cpe:2.3:a:videodb:videodb:2.2.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
videodb	videodb	2.0.0	cpe:2.3:a:videodb:videodb:2.0.0:::::::*
videodb	videodb	2.0.2	cpe:2.3:a:videodb:videodb:2.0.2:::::::*
videodb	videodb	2.2.1	cpe:2.3:a:videodb:videodb:2.2.1:::::::*

References

secunia.com/advisories/22184

www.securityfocus.com/bid/20265

www.vupen.com/english/advisories/2006/3864

exchange.xforce.ibmcloud.com/vulnerabilities/29260

www.exploit-db.com/exploits/2455

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

Confidence

Low

EPSS

0.086

Percentile

94.5%

JSON

Related for CVE-2006-5155