Search...

castor lib/code.php rootpath Variable Remote File Inclusion

2006-10-23T21:43:57

ID OSVDB:34254
Type osvdb
Reporter OSVDB
Modified 2006-10-23T21:43:57

Description

No description provided by the source

References:

Secunia Advisory ID:22527 Related OSVDB ID: 34257 Related OSVDB ID: 34255 Related OSVDB ID: 34256 FrSIRT Advisory: ADV-2006-4143 CVE-2006-5481

JSON Vulners Source

Initial Source

{"bulletinFamily": "software", "viewCount": 0, "reporter": "OSVDB", "references": [], "description": "# No description provided by the source\n\n## References:\n[Secunia Advisory ID:22527](https://secuniaresearch.flexerasoftware.com/advisories/22527/)\n[Related OSVDB ID: 34257](https://vulners.com/osvdb/OSVDB:34257)\n[Related OSVDB ID: 34255](https://vulners.com/osvdb/OSVDB:34255)\n[Related OSVDB ID: 34256](https://vulners.com/osvdb/OSVDB:34256)\nFrSIRT Advisory: ADV-2006-4143\n[CVE-2006-5481](https://vulners.com/cve/CVE-2006-5481)\n", "affectedSoftware": [], "href": "https://vulners.com/osvdb/OSVDB:34254", "modified": "2006-10-23T21:43:57", "enchantments": {"score": {"value": 5.6, "vector": "NONE", "modified": "2017-04-28T13:20:30", "rev": 2}, "dependencies": {"references": [{"type": "cve", "idList": ["CVE-2006-5481"]}, {"type": "osvdb", "idList": ["OSVDB:34255", "OSVDB:34257", "OSVDB:34256"]}], "modified": "2017-04-28T13:20:30", "rev": 2}, "vulnersScore": 5.6}, "id": "OSVDB:34254", "title": "castor lib/code.php rootpath Variable Remote File Inclusion", "edition": 1, "published": "2006-10-23T21:43:57", "type": "osvdb", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "cvelist": ["CVE-2006-5481"], "lastseen": "2017-04-28T13:20:30"}

{"cve": [{"lastseen": "2020-10-03T11:48:18", "description": "Multiple PHP remote file inclusion vulnerabilities in 2le.net Castor PHP Web Builder 1.1.1 allow remote attackers to execute arbitrary PHP code via the rootpath parameter in (1) lib/code.php, (2) lib/dbconnect.php, (3) lib/error.php, (4) lib/menu.php, and other unspecified files. NOTE: the provenance of this information is unknown; the details are obtained from third party information.", "edition": 3, "cvss3": {}, "published": "2006-10-24T20:07:00", "title": "CVE-2006-5481", "type": "cve", "cwe": ["CWE-94"], "bulletinFamily": "NVD", "cvss2": {"severity": "HIGH", "exploitabilityScore": 10.0, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": true, "cvssV2": {"accessComplexity": "LOW", "confidentialityImpact": "PARTIAL", "availabilityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "baseScore": 7.5, "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 6.4, "obtainUserPrivilege": false}, "cvelist": ["CVE-2006-5481"], "modified": "2011-09-08T04:00:00", "cpe": ["cpe:/a:castor:castor:1.1.1"], "id": "CVE-2006-5481", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2006-5481", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}, "cpe23": ["cpe:2.3:a:castor:castor:1.1.1:*:*:*:*:*:*:*"]}], "osvdb": [{"lastseen": "2017-04-28T13:20:30", "bulletinFamily": "software", "cvelist": ["CVE-2006-5481"], "description": "# No description provided by the source\n\n## References:\n[Secunia Advisory ID:22527](https://secuniaresearch.flexerasoftware.com/advisories/22527/)\n[Related OSVDB ID: 34257](https://vulners.com/osvdb/OSVDB:34257)\n[Related OSVDB ID: 34254](https://vulners.com/osvdb/OSVDB:34254)\n[Related OSVDB ID: 34255](https://vulners.com/osvdb/OSVDB:34255)\nFrSIRT Advisory: ADV-2006-4143\n[CVE-2006-5481](https://vulners.com/cve/CVE-2006-5481)\n", "edition": 1, "modified": "2006-10-23T21:43:57", "published": "2006-10-23T21:43:57", "href": "https://vulners.com/osvdb/OSVDB:34256", "id": "OSVDB:34256", "title": "castor lib/error.php rootpath Variable Remote File Inclusion", "type": "osvdb", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}, {"lastseen": "2017-04-28T13:20:30", "bulletinFamily": "software", "cvelist": ["CVE-2006-5481"], "description": "# No description provided by the source\n\n## References:\n[Secunia Advisory ID:22527](https://secuniaresearch.flexerasoftware.com/advisories/22527/)\n[Related OSVDB ID: 34254](https://vulners.com/osvdb/OSVDB:34254)\n[Related OSVDB ID: 34255](https://vulners.com/osvdb/OSVDB:34255)\n[Related OSVDB ID: 34256](https://vulners.com/osvdb/OSVDB:34256)\nFrSIRT Advisory: ADV-2006-4143\n[CVE-2006-5481](https://vulners.com/cve/CVE-2006-5481)\n", "edition": 1, "modified": "2006-10-23T21:43:57", "published": "2006-10-23T21:43:57", "href": "https://vulners.com/osvdb/OSVDB:34257", "id": "OSVDB:34257", "title": "castor lib/menu.php rootpath Variable Remote File Inclusion", "type": "osvdb", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}, {"lastseen": "2017-04-28T13:20:30", "bulletinFamily": "software", "cvelist": ["CVE-2006-5481"], "description": "# No description provided by the source\n\n## References:\n[Secunia Advisory ID:22527](https://secuniaresearch.flexerasoftware.com/advisories/22527/)\n[Related OSVDB ID: 34257](https://vulners.com/osvdb/OSVDB:34257)\n[Related OSVDB ID: 34254](https://vulners.com/osvdb/OSVDB:34254)\n[Related OSVDB ID: 34256](https://vulners.com/osvdb/OSVDB:34256)\nFrSIRT Advisory: ADV-2006-4143\n[CVE-2006-5481](https://vulners.com/cve/CVE-2006-5481)\n", "edition": 1, "modified": "2006-10-23T21:43:57", "published": "2006-10-23T21:43:57", "href": "https://vulners.com/osvdb/OSVDB:34255", "id": "OSVDB:34255", "title": "castor lib/dbconnect.php rootpath Variable Remote File Inclusion", "type": "osvdb", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}]}