Lucene search

[email protected]CVE-2006-5306

HistoryOct 17, 2006 - 3:07 p.m.

CVE-2006-5306

2006-10-1715:07:00

CWE-94

[email protected]

web.nvd.nist.gov

cve

php

remote file inclusion

journals system

vulnerability

phpbb

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.7 High

AI Score

Confidence

Low

0.079 Low

EPSS

Percentile

94.3%

JSON

Multiple PHP remote file inclusion vulnerabilities in the Journals System module 1.0.2 (RC2) and earlier for phpBB allow remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter in (1) includes/journals_delete.php, (2) includes/journals_post.php, or (3) includes/journals_edit.php.

Affected configurations

NVD

Node

phpbbjournals_system_moduleRange≤1.0.2_rc2

phpbbjournals_system_moduleMatch1.0.2

CPENameOperatorVersion
phpbb:journals_system_modulephpbb journals system modulele1.0.2_rc2
phpbb:journals_system_modulephpbb journals system moduleeq1.0.2

CPE	Name	Operator	Version
phpbb:journals_system_module	phpbb journals system module	le	1.0.2_rc2
phpbb:journals_system_module	phpbb journals system module	eq	1.0.2

References

secunia.com/advisories/22387

securityreason.com/securityalert/1731

securitytracker.com/id?1017058

www.securityfocus.com/archive/1/448443/100/0/threaded

www.securityfocus.com/bid/20484

www.vupen.com/english/advisories/2006/4029

exchange.xforce.ibmcloud.com/vulnerabilities/29491

www.exploit-db.com/exploits/2522

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.7 High

AI Score

Confidence

Low

0.079 Low

EPSS

Percentile

94.3%

JSON

Related for CVE-2006-5306

nvd1 cvelist1 nessus1