Lucene search
HistoryDec 20, 2006 - 2:28 a.m.
CVE-2006-6648
php
remote file inclusion
vulnerability
planetluc
rateme 1.3.2
url
pathtoscript
nvd
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.9 High
AI Score
Confidence
Low
0.086 Low
EPSS
Percentile
94.5%
PHP remote file inclusion vulnerability in main.inc.php in planetluc.com RateMe 1.3.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the pathtoscript parameter.
Affected configurations
Node
planetluc.comratemeRange≤1.3.2
| CPE | Name | Operator | Version |
|---|---|---|---|
| planetluc.com:rateme | planetluc.com rateme | le | 1.3.2 |
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.9 High
AI Score
Confidence
Low
0.086 Low
EPSS
Percentile
94.5%
Related for CVE-2006-6648