CVE-2006-0502

2006-02-0122:00:00

mitre

www.cve.org

6.8 Medium

AI Score

Confidence

Low

0.148 Low

EPSS

Percentile

95.8%

JSON

PHP remote file inclusion vulnerability in loginout.php in FarsiNews 2.1 Beta 2 and earlier, with register_globals enabled, allows remote attackers to include arbitrary files via a URL in the cutepath parameter.

References

secunia.com/advisories/18637

securityreason.com/securityalert/390

securitytracker.com/id?1015554

www.hamid.ir/security/farsinews.txt

www.osvdb.org/22878

www.securityfocus.com/archive/1/423568/100/0/threaded

www.securityfocus.com/bid/16440

www.vupen.com/english/advisories/2006/0411

exchange.xforce.ibmcloud.com/vulnerabilities/24419