Lucene search

[email protected]CVE-2006-6976

HistoryFeb 08, 2007 - 5:28 p.m.

CVE-2006-6976

2007-02-0817:28:00

CWE-94

[email protected]

web.nvd.nist.gov

cve

php

remote file inclusion

centipaid_class.php

security vulnerability

7.9 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.028 Low

EPSS

Percentile

90.5%

JSON

PHP remote file inclusion vulnerability in centipaid_class.php in CentiPaid 1.4.2 and earlier allows remote attackers to execute arbitrary code via a URL in the absolute_path parameter.

CPENameOperatorVersion
centipaid:centipaidcentipaidle1.4.2

CPE	Name	Operator	Version
centipaid:centipaid	centipaid	le	1.4.2

References

www.attrition.org/pipermail/vim/2007-February/001296.html

exchange.xforce.ibmcloud.com/vulnerabilities/29564

www.exploit-db.com/exploits/2555

7.9 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.028 Low

EPSS

Percentile

90.5%

JSON

Related for CVE-2006-6976

securityvulns1