Lucene search

[email protected]NVD:CVE-2006-3749

HistoryJul 21, 2006 - 2:03 p.m.

CVE-2006-3749

2006-07-2114:03:00

CWE-94

[email protected]

web.nvd.nist.gov

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.6

Confidence

High

EPSS

0.07

Percentile

94.0%

JSON

PHP remote file inclusion vulnerability in sitemap.xml.php in Sitemap component (com_sitemap) 2.0.0 for Mambo 4.5.1 CMS, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.

Affected configurations

Nvd

Node

mambositemapMatch2.0.0

VendorProductVersionCPE
mambositemap2.0.0cpe:2.3:a:mambo:sitemap:2.0.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
mambo	sitemap	2.0.0	cpe:2.3:a:mambo:sitemap:2.0.0:::::::*

References

advisories.echo.or.id/adv/adv38-matdhule-2006.txt

archives.neohapsis.com/archives/bugtraq/2006-07/0180.html

secunia.com/advisories/21055

securityreason.com/securityalert/1249

www.securityfocus.com/bid/18991

www.securityfocus.com/bid/24592

www.vupen.com/english/advisories/2006/2803

exchange.xforce.ibmcloud.com/vulnerabilities/27723

www.exploit-db.com/exploits/2028

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.6

Confidence

High

EPSS

0.07

Percentile

94.0%

JSON

Related for NVD:CVE-2006-3749

cvelist1 exploitdb1 cve1 nessus1