Lucene search
HistoryDec 15, 2006 - 7:28 p.m.
CVE-2006-6590
cve-2006-6590
php
remote file inclusion
ar memberscript
url
vulnerability
nvd
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.9 High
AI Score
Confidence
Low
0.047 Low
EPSS
Percentile
92.7%
PHP remote file inclusion vulnerability in usercp_menu.php in AR Memberscript allows remote attackers to execute arbitrary PHP code via a URL in the script_folder parameter.
Affected configurations
Node
phpar_memberscript
| CPE | Name | Operator | Version |
|---|---|---|---|
| php:ar_memberscript | php ar memberscript | eq | * |
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.9 High
AI Score
Confidence
Low
0.047 Low
EPSS
Percentile
92.7%
Related for CVE-2006-6590