Lucene search
HistoryOct 17, 2006 - 3:07 p.m.
CVE-2006-5304
cve-2006-5304
php
remote file inclusion
inccms core 1.0.0
security vulnerability
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.9 High
AI Score
Confidence
Low
0.117 Low
EPSS
Percentile
95.3%
PHP remote file inclusion vulnerability in inc/settings.php in IncCMS Core 1.0.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the inc_dir parameter.
Affected configurations
Node
inccms_technologyinccms_coreRange≤1.0.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| inccms_technology:inccms_core | inccms technology inccms core | le | 1.0.0 |
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.9 High
AI Score
Confidence
Low
0.117 Low
EPSS
Percentile
95.3%
Related for CVE-2006-5304