Lucene search

K
cve[email protected]CVE-2006-5533
HistoryOct 26, 2006 - 5:07 p.m.

CVE-2006-5533

2006-10-2617:07:00
NVD-CWE-Other
web.nvd.nist.gov
17
cve-2006-5533
php
remote file inclusion
aroundme
register_globals
arbitrary code execution
url
templatepath
barnraiser_01
pol_view.tpl.php

7.9 High

AI Score

Confidence

Low

5.1 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.015 Low

EPSS

Percentile

87.0%

Multiple PHP remote file inclusion vulnerabilities in AROUNDMe 0.6.9, and possibly earlier, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the templatePath parameter in template/barnraiser_01/pol_view.tpl.php and other unspecified PHP scripts, a different vector than CVE-2006-5401.

CPENameOperatorVersion
aroundme:aroundmearoundmele0.6.9

7.9 High

AI Score

Confidence

Low

5.1 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.015 Low

EPSS

Percentile

87.0%

Related for CVE-2006-5533