Lucene search

[email protected]CVE-2006-6710

HistoryDec 23, 2006 - 1:28 a.m.

CVE-2006-6710

2006-12-2301:28:00

CWE-94

[email protected]

web.nvd.nist.gov

cve-2006-6710

php

remote file inclusion

pgmreloaded 0.8.5

nvd

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8 High

AI Score

Confidence

Low

0.021 Low

EPSS

Percentile

89.1%

JSON

Multiple PHP remote file inclusion vulnerabilities in PgmReloaded 0.8.5 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the (1) lang parameter to (a) index.php, the (2) CFG[libdir] and (3) CFG[localedir] parameters to (b) common.inc.php, and the CFG[localelangdir] parameter to © form_header.php.

Affected configurations

NVD

Node

matteolucarellipgmreloadedRange≤0.8.5

matteolucarellipgmreloadedMatch0.5

matteolucarellipgmreloadedMatch0.6

matteolucarellipgmreloadedMatch0.6.2

matteolucarellipgmreloadedMatch0.7

matteolucarellipgmreloadedMatch0.7.1

matteolucarellipgmreloadedMatch0.7.3

matteolucarellipgmreloadedMatch0.8

matteolucarellipgmreloadedMatch0.8.1

matteolucarellipgmreloadedMatch0.8.2

matteolucarellipgmreloadedMatch0.8.3

matteolucarellipgmreloadedMatch0.8.4

CPENameOperatorVersion
matteolucarelli:pgmreloadedmatteolucarelli pgmreloadedle0.8.5
matteolucarelli:pgmreloadedmatteolucarelli pgmreloadedeq0.5
matteolucarelli:pgmreloadedmatteolucarelli pgmreloadedeq0.6
matteolucarelli:pgmreloadedmatteolucarelli pgmreloadedeq0.6.2
matteolucarelli:pgmreloadedmatteolucarelli pgmreloadedeq0.7
matteolucarelli:pgmreloadedmatteolucarelli pgmreloadedeq0.7.1
matteolucarelli:pgmreloadedmatteolucarelli pgmreloadedeq0.7.3
matteolucarelli:pgmreloadedmatteolucarelli pgmreloadedeq0.8
matteolucarelli:pgmreloadedmatteolucarelli pgmreloadedeq0.8.1
matteolucarelli:pgmreloadedmatteolucarelli pgmreloadedeq0.8.2

CPE	Name	Operator	Version
matteolucarelli:pgmreloaded	matteolucarelli pgmreloaded	le	0.8.5
matteolucarelli:pgmreloaded	matteolucarelli pgmreloaded	eq	0.5
matteolucarelli:pgmreloaded	matteolucarelli pgmreloaded	eq	0.6
matteolucarelli:pgmreloaded	matteolucarelli pgmreloaded	eq	0.6.2
matteolucarelli:pgmreloaded	matteolucarelli pgmreloaded	eq	0.7
matteolucarelli:pgmreloaded	matteolucarelli pgmreloaded	eq	0.7.1
matteolucarelli:pgmreloaded	matteolucarelli pgmreloaded	eq	0.7.3
matteolucarelli:pgmreloaded	matteolucarelli pgmreloaded	eq	0.8
matteolucarelli:pgmreloaded	matteolucarelli pgmreloaded	eq	0.8.1
matteolucarelli:pgmreloaded	matteolucarelli pgmreloaded	eq	0.8.2

Rows per page:

1-10 of 121

References

secunia.com/advisories/23480

www.securityfocus.com/bid/21696

www.vupen.com/english/advisories/2006/5116

www.exploit-db.com/exploits/2971

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8 High

AI Score

Confidence

Low

0.021 Low

EPSS

Percentile

89.1%

JSON

Related for CVE-2006-6710

nvd1 cvelist1