{"id": "SECURITYVULNS:VULN:5832", "bulletinFamily": "software", "title": "Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)", "description": "PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.", "published": "2006-03-01T00:00:00", "modified": "2006-03-01T00:00:00", "cvss": {"score": 0.0, "vector": "NONE"}, "href": "https://vulners.com/securityvulns/SECURITYVULNS:VULN:5832", "reporter": " ", "references": ["https://vulners.com/securityvulns/securityvulns:doc:11654", "https://vulners.com/securityvulns/securityvulns:doc:11614", "https://vulners.com/securityvulns/securityvulns:doc:11626", "https://vulners.com/securityvulns/securityvulns:doc:11611", "https://vulners.com/securityvulns/securityvulns:doc:11627", "https://vulners.com/securityvulns/securityvulns:doc:11655", "https://vulners.com/securityvulns/securityvulns:doc:11608", "https://vulners.com/securityvulns/securityvulns:doc:11609", "https://vulners.com/securityvulns/securityvulns:doc:11631", "https://vulners.com/securityvulns/securityvulns:doc:11630", "https://vulners.com/securityvulns/securityvulns:doc:11624", "https://vulners.com/securityvulns/securityvulns:doc:11629", "https://vulners.com/securityvulns/securityvulns:doc:11616", "https://vulners.com/securityvulns/securityvulns:doc:11612", "https://vulners.com/securityvulns/securityvulns:doc:11625", "https://vulners.com/securityvulns/securityvulns:doc:11623", "https://vulners.com/securityvulns/securityvulns:doc:11613", "https://vulners.com/securityvulns/securityvulns:doc:11636", "https://vulners.com/securityvulns/securityvulns:doc:11628", "https://vulners.com/securityvulns/securityvulns:doc:11615", "https://vulners.com/securityvulns/securityvulns:doc:11653", "https://vulners.com/securityvulns/securityvulns:doc:11656", "https://vulners.com/securityvulns/securityvulns:doc:11618", "https://vulners.com/securityvulns/securityvulns:doc:11610", "https://vulners.com/securityvulns/securityvulns:doc:11637", "https://vulners.com/securityvulns/securityvulns:doc:11607", "https://vulners.com/securityvulns/securityvulns:doc:11617", "https://vulners.com/securityvulns/securityvulns:doc:11652", "https://vulners.com/securityvulns/securityvulns:doc:11635", "https://vulners.com/securityvulns/securityvulns:doc:11632"], "cvelist": [], "type": "securityvulns", "lastseen": "2018-08-31T11:09:20", "edition": 1, "viewCount": 4, "enchantments": {"score": {"value": 5.4, "vector": "NONE", "modified": "2018-08-31T11:09:20", "rev": 2}, "dependencies": {"references": [{"type": "nessus", "idList": ["FEDORA_2019-A1AF621FAF.NASL", "FEDORA_2019-E5FF5D0FFD.NASL", "DEBIAN_DSA-4500.NASL", "OPENSUSE-2019-1666.NASL", "SYMANTEC_DCS_CVE_2020_5832.NASL", "GENTOO_GLSA-201908-18.NASL", "FEDORA_2019-8FB8240D14.NASL"]}, {"type": "cve", "idList": ["CVE-2020-5832", "CVE-2019-5832"]}, {"type": "openvas", "idList": ["OPENVAS:1361412562310852598", "OPENVAS:1361412562310876911", "OPENVAS:1361412562310876549", "OPENVAS:1361412562310852900", "OPENVAS:1361412562310876604", "OPENVAS:1361412562310704500"]}, {"type": "gentoo", "idList": ["GLSA-201908-18"]}, {"type": "msupdate", "idList": ["MS:6DBE32FB-5832-4DAC-8EC8-31C4B0651E31"]}, {"type": "debian", "idList": ["DEBIAN:DSA-4500-1:C7649"]}, {"type": "suse", "idList": ["OPENSUSE-SU-2019:1666-1"]}, {"type": "redhat", "idList": ["RHSA-2019:1477"]}, {"type": "securityvulns", "idList": ["SECURITYVULNS:DOC:11632", "SECURITYVULNS:DOC:11653", "SECURITYVULNS:DOC:11652", "SECURITYVULNS:DOC:11617", "SECURITYVULNS:DOC:11614", "SECURITYVULNS:DOC:11611", "SECURITYVULNS:DOC:11655", "SECURITYVULNS:DOC:11626", "SECURITYVULNS:DOC:11623", "SECURITYVULNS:DOC:11656", "SECURITYVULNS:DOC:11630", "SECURITYVULNS:DOC:11627", "SECURITYVULNS:DOC:11608", "SECURITYVULNS:DOC:11631", "SECURITYVULNS:DOC:11615", "SECURITYVULNS:DOC:11616", "SECURITYVULNS:DOC:11624", "SECURITYVULNS:DOC:11636", "SECURITYVULNS:DOC:11613", "SECURITYVULNS:DOC:11625", "SECURITYVULNS:DOC:11610", "SECURITYVULNS:DOC:11612", "SECURITYVULNS:DOC:11637", "SECURITYVULNS:DOC:11629", "SECURITYVULNS:DOC:11607", "SECURITYVULNS:DOC:11635", "SECURITYVULNS:DOC:11618", "SECURITYVULNS:DOC:11609", "SECURITYVULNS:DOC:11654", "SECURITYVULNS:DOC:11628"]}], "modified": "2018-08-31T11:09:20", "rev": 2}, "vulnersScore": 5.4}, "affectedSoftware": [{"name": "JFacets", "operator": "eq", "version": "0.1"}, {"name": "n8cms", "operator": "eq", "version": "1.2"}, {"name": "CGI Calendar", "operator": "eq", "version": "2.7"}, {"name": "Fantastic News", "operator": "eq", "version": "2.1"}, {"name": "Archangel Weblog", "operator": "eq", "version": "0.90"}, {"name": "n8cms", "operator": "eq", "version": "1.1"}, {"name": "StoreBot", "operator": "eq", "version": "2002"}, {"name": "EKINboard", "operator": "eq", "version": "1.0"}, {"name": "Farsinews", "operator": "eq", "version": "2.5"}, {"name": "Parodia", "operator": "eq", "version": "6.2"}, {"name": "PunBB", "operator": "eq", "version": "1.2"}, {"name": "Quirex", "operator": "eq", "version": "2.0"}, {"name": "PerlBlog", "operator": "eq", "version": "1.09"}, {"name": "PwsPHP", "operator": "eq", "version": "1.2"}, {"name": "LanParty Intranet System", "operator": "eq", "version": "2.1"}, {"name": "Issue Dealer", "operator": "eq", "version": "0.9"}, {"name": "iGENUS Webmail", "operator": "eq", "version": "2.02"}, {"name": "D3Jeeb Pro", "operator": "eq", "version": "3"}, {"name": "squirrelmail", "operator": "eq", "version": "1.4"}, {"name": "MyBB", "operator": "eq", "version": "1.0"}, {"name": "DirectContact", "operator": "eq", "version": "3.0"}, {"name": "SendCard", "operator": "eq", "version": "3.3"}, {"name": "4images", "operator": "eq", "version": "1.7"}, {"name": "EJ3 TOPo", "operator": "eq", "version": "2.2"}, {"name": "myPHPNuke", "operator": "eq", "version": "1.8"}, {"name": "StoreBot", "operator": "eq", "version": "2005"}, {"name": "WordPress", "operator": "eq", "version": "2.0"}, {"name": "phpRPC", "operator": "eq", "version": "0.7"}, {"name": "PerlBlog", "operator": "eq", "version": "1.08"}]}

{"rst": [{"lastseen": "2021-02-28T00:00:00", "bulletinFamily": "ioc", "cvelist": [], "description": "Found **104[.]26.3.86** in [RST Threat Feed](https://www.rstcloud.net/profeed) with score **10**.\n First seen: 2020-01-02T03:00:00, Last seen: 2021-02-28T03:00:00.\n IOC tags: **malware**.\nASN 13335: (First IP 104.23.144.0, Last IP 104.27.207.255).\nASN Name \"CLOUDFLARENET\" and Organisation \"Cloudflare Inc\".\nThis IP is a part of \"**cloudflare**\" address pools.\nASN hosts 39676712 domains.\nGEO IP information: City \"\", Country \"United States\".\nIOC could be a **False Positive** (Cloud provider IP).\n[https://rstcloud.net/](https://rstcloud.net/)", "edition": 1, "modified": "2020-01-02T00:00:00", "id": "RST:D2A479DA-5832-39E9-AD30-F3A5E55B0AE3", "href": "", "published": "2021-03-01T00:00:00", "title": "RST Threat feed. IOC: 104.26.3.86", "type": "rst", "cvss": {}}, {"lastseen": "2021-02-28T00:00:00", "bulletinFamily": "ioc", "cvelist": [], "description": "Found **176[.]99.221.44** in [RST Threat Feed](https://www.rstcloud.net/profeed) with score **48**.\n First seen: 2021-02-28T03:00:00, Last seen: 2021-02-28T03:00:00.\n IOC tags: **shellprobe**.\nASN 35598: (First IP 176.99.128.0, Last IP 176.99.255.255).\nASN Name \"INETCOM\" and Organisation \"\".\nASN hosts 513 domains.\nGEO IP information: City \"Moscow\", Country \"Russia\".\n[https://rstcloud.net/](https://rstcloud.net/)", "edition": 1, "modified": "2021-02-28T00:00:00", "id": "RST:0E707B59-5832-3385-B97A-11286E1E3E52", "href": "", "published": "2021-03-01T00:00:00", "title": "RST Threat feed. IOC: 176.99.221.44", "type": "rst", "cvss": {}}, {"lastseen": "2021-02-28T00:00:00", "bulletinFamily": "ioc", "cvelist": [], "description": "Found **151[.]40.130.98** in [RST Threat Feed](https://www.rstcloud.net/profeed) with score **13**.\n First seen: 2020-12-23T03:00:00, Last seen: 2021-02-28T03:00:00.\n IOC tags: **generic**.\nASN 1267: (First IP 151.11.54.0, Last IP 151.79.255.255).\nASN Name \"ASNWINDTRE\" and Organisation \"IUNET\".\nASN hosts 26731 domains.\nGEO IP information: City \"Florence\", Country \"Italy\".\n[https://rstcloud.net/](https://rstcloud.net/)", "edition": 1, "modified": "2020-12-23T00:00:00", "id": "RST:1B520F76-5832-3CCE-AE77-2F97D04D2CF8", "href": "", "published": "2021-03-01T00:00:00", "title": "RST Threat feed. IOC: 151.40.130.98", "type": "rst", "cvss": {}}, {"lastseen": "2021-02-27T00:00:00", "bulletinFamily": "ioc", "cvelist": [], "description": "Found **xn--80akkvlh0d[.]xn--p1ai** in [RST Threat Feed](https://rstcloud.net/profeed) with score **10**.\n First seen: 2019-12-15T03:00:00, Last seen: 2021-02-27T03:00:00.\n IOC tags: **spam**.\nIOC could be a **False Positive** (Domain not resolved. Whois records not found).\n[https://rstcloud.net/](https://rstcloud.net/)", "edition": 1, "modified": "2019-12-15T00:00:00", "id": "RST:5A1F6219-5832-3D99-9BCD-76BD3A4E2639", "href": "", "published": "2021-02-28T00:00:00", "title": "RST Threat feed. IOC: xn--80akkvlh0d.xn--p1ai", "type": "rst", "cvss": {}}, {"lastseen": "2021-01-17T00:00:00", "bulletinFamily": "ioc", "cvelist": [], "description": "Found **bfsbb[.]coinhive.com** in [RST Threat Feed](https://rstcloud.net/profeed) with score **10**.\n First seen: 2021-01-17T03:00:00, Last seen: 2021-01-17T03:00:00.\n IOC tags: **cryptomining**.\nIOC could be a **False Positive** (Domain not resolved. Whois records not found).\n[https://rstcloud.net/](https://rstcloud.net/)", "edition": 1, "modified": "2021-01-17T00:00:00", "id": "RST:445490B6-5832-36DC-878C-7CC52958CDF7", "href": "", "published": "2021-02-24T00:00:00", "title": "RST Threat feed. IOC: bfsbb.coinhive.com", "type": "rst", "cvss": {}}, {"lastseen": "2021-01-17T00:00:00", "bulletinFamily": "ioc", "cvelist": [], "description": "Found **cpanel[.]pulsaku18.coinpoolit.webhop.me** in [RST Threat Feed](https://rstcloud.net/profeed) with score **10**.\n First seen: 2020-03-17T03:00:00, Last seen: 2021-01-17T03:00:00.\n IOC tags: **cryptomining**.\nIOC could be a **False Positive** (Domain not resolved. Whois records not found).\n[https://rstcloud.net/](https://rstcloud.net/)", "edition": 1, "modified": "2020-03-17T00:00:00", "id": "RST:614C4F76-5832-367F-9A38-87FAFD01D911", "href": "", "published": "2021-02-24T00:00:00", "title": "RST Threat feed. IOC: cpanel.pulsaku18.coinpoolit.webhop.me", "type": "rst", "cvss": {}}, {"lastseen": "2021-01-17T00:00:00", "bulletinFamily": "ioc", "cvelist": [], "description": "Found **supernode[.]gridcoin.us** in [RST Threat Feed](https://rstcloud.net/profeed) with score **10**.\n First seen: 2019-12-15T03:00:00, Last seen: 2021-01-17T03:00:00.\n IOC tags: **cryptomining**.\nIOC could be a **False Positive** (Domain not resolved. Whois records not found).\n[https://rstcloud.net/](https://rstcloud.net/)", "edition": 1, "modified": "2019-12-15T00:00:00", "id": "RST:EF1FAB50-5832-3BCD-9F1B-BF6EB01B6AF1", "href": "", "published": "2021-02-24T00:00:00", "title": "RST Threat feed. IOC: supernode.gridcoin.us", "type": "rst", "cvss": {}}, {"lastseen": "2021-02-24T00:00:00", "bulletinFamily": "ioc", "cvelist": [], "description": "Found **neo[.]cn.bitcoin.com** in [RST Threat Feed](https://rstcloud.net/profeed) with score **10**.\n First seen: 2021-02-24T03:00:00, Last seen: 2021-02-24T03:00:00.\n IOC tags: **cryptomining**.\nIOC could be a **False Positive** (Domain not resolved. Whois records not found).\n[https://rstcloud.net/](https://rstcloud.net/)", "edition": 1, "modified": "2021-02-24T00:00:00", "id": "RST:59CF77C3-5832-3D68-A3DD-26EBC7BB91EA", "href": "", "published": "2021-02-24T00:00:00", "title": "RST Threat feed. IOC: neo.cn.bitcoin.com", "type": "rst", "cvss": {}}, {"lastseen": "2021-01-17T00:00:00", "bulletinFamily": "ioc", "cvelist": [], "description": "Found **nmickey[.]hiveon.net** in [RST Threat Feed](https://rstcloud.net/profeed) with score **10**.\n First seen: 2019-12-15T03:00:00, Last seen: 2021-01-17T03:00:00.\n IOC tags: **cryptomining**.\nIOC could be a **False Positive** (Domain not resolved. Whois records not found).\n[https://rstcloud.net/](https://rstcloud.net/)", "edition": 1, "modified": "2019-12-15T00:00:00", "id": "RST:5C27A683-5832-37C4-9FAF-5370E3A31687", "href": "", "published": "2021-02-24T00:00:00", "title": "RST Threat feed. IOC: nmickey.hiveon.net", "type": "rst", "cvss": {}}, {"lastseen": "2021-02-23T00:00:00", "bulletinFamily": "ioc", "cvelist": [], "description": "Found **0[.]0.0.0 www.smartpool.me** in [RST Threat Feed](https://rstcloud.net/profeed) with score **10**.\n First seen: 2021-02-23T03:00:00, Last seen: 2021-02-23T03:00:00.\n IOC tags: **cryptomining**.\nIOC could be a **False Positive** (Domain not resolved. Whois records not found).\n[https://rstcloud.net/](https://rstcloud.net/)", "edition": 1, "modified": "2021-02-23T00:00:00", "id": "RST:52990D43-5832-30F4-A5AA-A727B6A172CE", "href": "", "published": "2021-02-23T00:00:00", "title": "RST Threat feed. IOC: 0.0.0.0 www.smartpool.me", "type": "rst", "cvss": {}}]}