Lucene search
MitreCVE-2006-5730HistoryNov 06, 2006 - 6:07 p.m.
CVE-2006-5730
2006-11-0618:07:00
mitre
web.nvd.nist.gov
49
cve
php
remote file inclusion
vulnerability
modx cms
CVSS2
5.1
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:P/I:P/A:P
AI Score
7.5
Confidence
High
EPSS
0.105
Percentile
95.0%
PHP remote file inclusion vulnerability in manager/media/browser/mcpuk/connectors/php/Commands/Thumbnail.php in Modx CMS 0.9.2.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the base_path parameter. NOTE: it is possible that this is a vulnerability in FCKeditor.
Affected configurations
Node
modxcmsmodxcmsRange≤0.9.2.1
ORmodxcmsmodxcmsMatch0.9.1
Related
openvas
openvas
MODX CMS base_path Parameter Remote File Include Vulnerability
2008-10-24 00:00:00
cvelist
cvelist
CVE-2006-5730
2006-11-06 18:00:00
nvd
nvd
CVE-2006-5730
2006-11-06 18:07:00
exploitdb
exploitdb
MODx CMS 0.9.2.1 - 'FCKeditor' Remote File Inclusion
2006-11-03 00:00:00
nessus
nessus
MODx CMS base_path Parameter Remote File Inclusion
2006-11-14 00:00:00
CVSS2
5.1
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:P/I:P/A:P
AI Score
7.5
Confidence
High
EPSS
0.105
Percentile
95.0%
Related for CVE-2006-5730