Lucene search

K
cveMitreCVE-2006-5838
HistoryNov 10, 2006 - 1:07 a.m.

CVE-2006-5838

2006-11-1001:07:00
mitre
web.nvd.nist.gov
28
cve-2006-5838
php
remote file inclusion
vulnerability
newp news publication system
register_globals

CVSS2

5.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

AI Score

8

Confidence

Low

EPSS

0.051

Percentile

93.0%

PHP remote file inclusion vulnerability in lib/class.Database.php in NewP News Publication System 1.0.0, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via the path parameter.

Affected configurations

Nvd
Node
newpnews_publication_systemMatch1.0.0
VendorProductVersionCPE
newpnews_publication_system1.0.0cpe:2.3:a:newp:news_publication_system:1.0.0:*:*:*:*:*:*:*

CVSS2

5.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

AI Score

8

Confidence

Low

EPSS

0.051

Percentile

93.0%

Related for CVE-2006-5838