Lucene search
HistoryJul 21, 2006 - 2:03 p.m.
CVE-2006-3685
5.1 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:P/I:P/A:P
7.5 High
AI Score
Confidence
Low
0.113 Low
EPSS
Percentile
95.3%
PHP remote file inclusion vulnerability in CzarNews 1.12 through 1.14 allows remote attackers to execute arbitrary PHP code via a URL in the tpath parameter to cn_config.php. NOTE: the news.php vector is already covered by CVE-2005-0859.
Affected configurations
Node
czaries_networkczarnewsMatch1.12
ORczaries_networkczarnewsMatch1.13
ORczaries_networkczarnewsMatch1.14
Related
cve
cve
CVE-2006-3685
2006-07-21 14:03:00
CVE-2005-0859
2005-05-02 04:00:00
cvelist
cvelist
CVE-2006-3685
2006-07-18 21:00:00
CVE-2005-0859
2005-03-24 05:00:00
nvd
nvd
CVE-2005-0859
2005-05-02 04:00:00
5.1 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:P/I:P/A:P
7.5 High
AI Score
Confidence
Low
0.113 Low
EPSS
Percentile
95.3%
Related for NVD:CVE-2006-3685