Lucene search

K
cveMitreCVE-2006-5673
HistoryNov 03, 2006 - 1:07 a.m.

CVE-2006-5673

2006-11-0301:07:00
mitre
web.nvd.nist.gov
52
php
remote file inclusion
minibb 2.0.2
security
vulnerability
nvd

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.5

Confidence

High

EPSS

0.168

Percentile

96.1%

PHP remote file inclusion vulnerability in bb_func_txt.php in miniBB 2.0.2 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the pathToFiles parameter.

Affected configurations

Nvd
Node
minibbminibbRange2.0.2
VendorProductVersionCPE
minibbminibb*cpe:2.3:a:minibb:minibb:*:*:*:*:*:*:*:*

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.5

Confidence

High

EPSS

0.168

Percentile

96.1%

Related for CVE-2006-5673