Lucene search

[email protected]CVE-2006-5517

HistoryOct 26, 2006 - 4:07 p.m.

CVE-2006-5517

2006-10-2616:07:00

CWE-94

[email protected]

web.nvd.nist.gov

cve-2006-5517

php

remote file inclusion

vulnerability

rhode island open meetings filing application

omfa

arbitrary code execution

nvd

8.4 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.395 Low

EPSS

Percentile

97.2%

JSON

Multiple PHP remote file inclusion vulnerabilities in Rhode Island Open Meetings Filing Application (OMFA) allow remote attackers to execute arbitrary PHP code via a URL in the PROJECT_ROOT parameter to (1) editmeetings/session.php, (2) email/session.php, (3) entityproperties/session.php, or (4) inc/mail.php.

CPENameOperatorVersion
rhode_island_secretary_of_state:open_meetings_filing_systemrhode island secretary of state open meetings filing systemeq*

CPE	Name	Operator	Version
rhode_island_secretary_of_state:open_meetings_filing_system	rhode island secretary of state open meetings filing system	eq	*

References

secunia.com/advisories/22503

securityreason.com/securityalert/1775

www.osvdb.org/29975

www.osvdb.org/29976

www.osvdb.org/29977

www.osvdb.org/29978

www.securityfocus.com/archive/1/449396/100/0/threaded

www.securityfocus.com/bid/20656

www.vupen.com/english/advisories/2006/4144

exchange.xforce.ibmcloud.com/vulnerabilities/29773

www.exploit-db.com/exploits/2609

8.4 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.395 Low

EPSS

Percentile

97.2%

JSON