Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2006-4602
HistorySep 07, 2006 - 12:04 a.m.

CVE-2006-4602

2006-09-0700:04:00
[email protected]
web.nvd.nist.gov

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.4 High

AI Score

Confidence

Low

0.964 High

EPSS

Percentile

99.6%

JSON

Unrestricted file upload vulnerability in jhot.php in TikiWiki 1.9.4 Sirius and earlier allows remote attackers to execute arbitrary PHP code via a filepath parameter that contains a filename with a .php extension, which is uploaded to the img/wiki/ directory.

Affected configurations

NVD
Node
tikitikiwiki_cms\/groupwareMatch1.9.4

Related

saint 4
cve 1
packetstorm 1
cvelist 1
nessus 3
checkpoint_advisories 1
openvas 5
freebsd 1
gentoo 1
saint
saint
TikiWiki file upload vulnerability (jhot.php)
2006-09-08 00:00:00
TikiWiki file upload vulnerability (jhot.php)
2006-09-08 00:00:00
TikiWiki file upload vulnerability (jhot.php)
2006-09-08 00:00:00
cve
cve
CVE-2006-4602
2006-09-07 00:04:00
packetstorm
packetstorm
TikiWiki jhot Remote Command Execution
2009-10-30 00:00:00
cvelist
cvelist
CVE-2006-4602
2006-09-07 00:00:00
nessus
nessus
TikiWiki jhot.php Arbitrary File Upload
2006-09-04 00:00:00
GLSA-200609-16 : Tikiwiki: Arbitrary command execution
2006-09-27 00:00:00
FreeBSD : tikiwiki -- multiple vulnerabilities (e4c62abd-5065-11db-a5ae-00508d6a62df)
2006-10-02 00:00:00
checkpoint_advisories
checkpoint_advisories
TikiWiki jhot.php Script File Upload Security Bypass (CVE-2006-4602)
2010-01-24 00:00:00
openvas
openvas
Tiki Wiki CMS Groupware jhot.php RCE Vulnerability
2012-08-22 00:00:00
Gentoo Security Advisory GLSA 200609-16 (tikiwiki)
2008-09-24 00:00:00
Gentoo Security Advisory GLSA 200609-16 (tikiwiki)
2008-09-24 00:00:00
freebsd
freebsd
tikiwiki -- multiple vulnerabilities
2006-08-21 00:00:00
gentoo
gentoo
Tikiwiki: Arbitrary command execution
2006-09-26 00:00:00

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.4 High

AI Score

Confidence

Low

0.964 High

EPSS

Percentile

99.6%

JSON
Related for NVD:CVE-2006-4602
saint4cve1packetstorm1cvelist1nessus3checkpoint_advisories1openvas5freebsd1gentoo1