Lucene search
HistoryAug 24, 2006 - 1:04 a.m.
CVE-2006-4329
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.7
Confidence
Low
EPSS
0.117
Percentile
95.3%
Multiple PHP remote file inclusion vulnerabilities in Shadows Rising RPG (Pre-Alpha) 0.0.5b and earlier allow remote attackers to execute arbitrary PHP code via a URL in the CONFIG[gameroot] parameter to (1) core/includes/security.inc.php, (2) core/includes/smarty.inc.php, (3) qcms/includes/smarty.inc.php or (4) qlib/smarty.inc.php.
Affected configurations
Node
shadows_rising_rpgshadows_rising_rpgRange≤0.0.5b_pre-alpha
| Vendor | Product | Version | CPE |
|---|---|---|---|
| shadows_rising_rpg | shadows_rising_rpg | * | cpe:2.3:a:shadows_rising_rpg:shadows_rising_rpg:*:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2006-4329
2006-08-24 01:00:00
cve
cve
CVE-2006-4329
2006-08-24 01:04:00
exploitdb
exploitdb
Shadows Rising RPG 0.0.5b - Remote File Inclusion
2006-08-20 00:00:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.7
Confidence
Low
EPSS
0.117
Percentile
95.3%
Related for NVD:CVE-2006-4329