Lucene search

K
nvd[email protected]NVD:CVE-2006-0164
HistoryJan 11, 2006 - 9:03 p.m.

CVE-2006-0164

2006-01-1121:03:00
web.nvd.nist.gov
5

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.5

Confidence

High

EPSS

0.089

Percentile

94.6%

phgstats.inc.php in phgstats before 0.5.1, if register_globals is enabled, allows remote attackers to include arbitrary files and execute arbitrary PHP code by modifying the PHGDIR variable.

Affected configurations

Nvd
Node
woah-projektphgstatsMatch0.1
OR
woah-projektphgstatsMatch0.2
OR
woah-projektphgstatsMatch0.3
OR
woah-projektphgstatsMatch0.3.1
OR
woah-projektphgstatsMatch0.4
OR
woah-projektphgstatsMatch0.4.1
OR
woah-projektphgstatsMatch0.4.2
OR
woah-projektphgstatsMatch0.5
VendorProductVersionCPE
woah-projektphgstats0.1cpe:2.3:a:woah-projekt:phgstats:0.1:*:*:*:*:*:*:*
woah-projektphgstats0.2cpe:2.3:a:woah-projekt:phgstats:0.2:*:*:*:*:*:*:*
woah-projektphgstats0.3cpe:2.3:a:woah-projekt:phgstats:0.3:*:*:*:*:*:*:*
woah-projektphgstats0.3.1cpe:2.3:a:woah-projekt:phgstats:0.3.1:*:*:*:*:*:*:*
woah-projektphgstats0.4cpe:2.3:a:woah-projekt:phgstats:0.4:*:*:*:*:*:*:*
woah-projektphgstats0.4.1cpe:2.3:a:woah-projekt:phgstats:0.4.1:*:*:*:*:*:*:*
woah-projektphgstats0.4.2cpe:2.3:a:woah-projekt:phgstats:0.4.2:*:*:*:*:*:*:*
woah-projektphgstats0.5cpe:2.3:a:woah-projekt:phgstats:0.5:*:*:*:*:*:*:*

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.5

Confidence

High

EPSS

0.089

Percentile

94.6%

Related for NVD:CVE-2006-0164