Lucene search
HistoryOct 10, 2006 - 4:06 a.m.
CVE-2006-5183
dayfox designs
dayfox blog
php
remote file inclusion
vulnerability
security
nvd
8 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.01 Low
EPSS
Percentile
84.0%
Multiple PHP remote file inclusion vulnerabilities in Dayfox Designs Dayfox Blog 2.0 allow remote attackers to execute arbitrary PHP code via a URL in the slogin parameter in the (1) adminlog.php, (2) postblog.php, (3) index.php, or (4) index2.php script in /edit.
Affected configurations
Node
dayfox_designsdayfox_blogMatch2.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| dayfox_designs:dayfox_blog | dayfox designs dayfox blog | eq | 2.0 |
8 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.01 Low
EPSS
Percentile
84.0%
Related for CVE-2006-5183