Lucene search

MitreCVE-2006-5460

HistoryOct 23, 2006 - 5:07 p.m.

CVE-2006-5460

2006-10-2317:07:00

mitre

web.nvd.nist.gov

cve-2006-5460

vulnerability

php

remote code execution

hinton design topsites

url injection

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

Confidence

Low

EPSS

0.08

Percentile

94.3%

JSON

Multiple PHP remote file inclusion vulnerabilities in Hinton Design phpht Topsites allow remote attackers to execute arbitrary PHP code via a URL in the phpht_real_path parameter to (1) index.php, (2) certain other scripts in the top-level directory, and (3) certain scripts in the admin/ directory. NOTE: CVE disputes this vulnerability because $phpht_real_path is defined before use in index.php and most other files except common.php, which is already covered by CVE-2006-5458

Affected configurations

Nvd

Node

hinton_designphpht_topsitesMatch1.0

VendorProductVersionCPE
hinton_designphpht_topsites1.0cpe:2.3:a:hinton_design:phpht_topsites:1.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
hinton_design	phpht_topsites	1.0	cpe:2.3:a:hinton_design:phpht_topsites:1.0:::::::*

References

securityreason.com/securityalert/1759

www.securityfocus.com/archive/1/448610/100/100/threaed

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

Confidence

Low

EPSS

0.08

Percentile

94.3%

JSON

Related for CVE-2006-5460