Lucene search

MitreCVE-2006-5252

HistoryOct 12, 2006 - 10:07 p.m.

CVE-2006-5252

2006-10-1222:07:00

mitre

web.nvd.nist.gov

php

remote file inclusion

vulnerability

webmedia explorer 2.8.7

CVSS2

5.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

AI Score

7.5

Confidence

High

EPSS

0.007

Percentile

80.3%

JSON

PHP remote file inclusion vulnerability in includes/core.lib.php in Webmedia Explorer 2.8.7 allows remote attackers to execute arbitrary PHP code via a URL in the path_include parameter.

Affected configurations

Nvd

Node

webmedia_explorerwebmedia_explorerMatch2.8.7

VendorProductVersionCPE
webmedia_explorerwebmedia_explorer2.8.7cpe:2.3:a:webmedia_explorer:webmedia_explorer:2.8.7:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
webmedia_explorer	webmedia_explorer	2.8.7	cpe:2.3:a:webmedia_explorer:webmedia_explorer:2.8.7:::::::*

References

secunia.com/advisories/22318

www.osvdb.org/29587

www.rahim.webd.pl/exploity/Exploits/96.txt

www.securityfocus.com/bid/20421

CVSS2

5.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

AI Score

7.5

Confidence

High

EPSS

0.007

Percentile

80.3%

JSON

Related for CVE-2006-5252