CVE-2006-4750

2006-09-1322:07:00

[email protected]

web.nvd.nist.gov

CVSS2

5.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

AI Score

7.5

Confidence

Low

EPSS

0.13

Percentile

95.5%

JSON

PHP remote file inclusion vulnerability in openi-admin/base/fileloader.php in OPENi-CMS 1.0.1, and possibly earlier, allows remote attackers to execute arbitrary PHP code via a URL in the config[openi_dir] parameter.

Affected configurations

Nvd

Node

openi-cms_groupopeni-cmsMatch1.0.1

openi-cms_groupopeni-cmsMatch1.0.1_beta1

VendorProductVersionCPE
openi-cms_groupopeni-cms1.0.1cpe:2.3:a:openi-cms_group:openi-cms:1.0.1:*:*:*:*:*:*:*
openi-cms_groupopeni-cms1.0.1_beta1cpe:2.3:a:openi-cms_group:openi-cms:1.0.1_beta1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
openi-cms_group	openi-cms	1.0.1	cpe:2.3:a:openi-cms_group:openi-cms:1.0.1:::::::*
openi-cms_group	openi-cms	1.0.1_beta1	cpe:2.3:a:openi-cms_group:openi-cms:1.0.1_beta1:::::::*