Lucene search
MitreCVE-2006-6154HistoryNov 28, 2006 - 11:28 p.m.
CVE-2006-6154
2006-11-2823:28:00
mitre
web.nvd.nist.gov
24
cve-2006-6154
php
remote file inclusion
hiox star rating system script
hsrs
vulnerability
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.9
Confidence
Low
EPSS
0.153
Percentile
95.9%
PHP remote file inclusion vulnerability in addcode.php in HIOX Star Rating System Script (HSRS) 1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the hm parameter.
Affected configurations
Node
hscriptshiox_star_rating_system_scriptRange≤1.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| hscripts | hiox_star_rating_system_script | * | cpe:2.3:a:hscripts:hiox_star_rating_system_script:*:*:*:*:*:*:*:* |
Related
nvd
nvd
CVE-2006-6154
2006-11-28 23:28:00
exploitdb
exploitdb
HSRS 1.0 - 'addcode.php' Remote File Inclusion
2006-11-23 00:00:00
cvelist
cvelist
CVE-2006-6154
2006-11-28 23:00:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.9
Confidence
Low
EPSS
0.153
Percentile
95.9%
Related for CVE-2006-6154