Lucene search
HistoryDec 15, 2006 - 7:28 p.m.
CVE-2006-6586
cve-2006-6586
remote file inclusion
vortex blog
vblog
c12
php
security
vulnerability
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8 High
AI Score
Confidence
Low
0.051 Low
EPSS
Percentile
93.0%
Multiple PHP remote file inclusion vulnerabilities in Vortex Blog (vBlog, aka C12) a0.1_nonfunc allow remote attackers to execute arbitrary PHP code via a URL in the cfgProgDir parameter in (1) secure.php or (2) checklogin.php in admin/auth/.
Affected configurations
Node
vblogvblogMatcha0.1_nonfunc
| CPE | Name | Operator | Version |
|---|---|---|---|
| vblog:vblog | vblog | eq | a0.1_nonfunc |
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8 High
AI Score
Confidence
Low
0.051 Low
EPSS
Percentile
93.0%
Related for CVE-2006-6586