Lucene search
HistoryOct 31, 2006 - 1:07 a.m.
CVE-2006-5613
cve-2006-5613
php
remote file inclusion
mp3 streaming downsampler
security vulnerability
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8 High
AI Score
Confidence
Low
0.1 Low
EPSS
Percentile
95.0%
PHP remote file inclusion in Core/core.inc.php in MP3 Streaming DownSampler (mp3SDS) 3.0, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via the fullpath parameter
Affected configurations
Node
mp3_streaming_downsamplermp3_streaming_downsamplerMatch3.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| mp3_streaming_downsampler:mp3_streaming_downsampler | mp3 streaming downsampler | eq | 3.0 |
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8 High
AI Score
Confidence
Low
0.1 Low
EPSS
Percentile
95.0%
Related for CVE-2006-5613