CVE-2006-0636

Опубликовано: 10 фев. 2006

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

desktop.php in eyeOS 0.8.9 and earlier tests for the existence of the _SESSION variable before calling the session_start function, which allows remote attackers to execute arbitrary PHP code and possibly conduct other attacks by modifying critical assumed-immutable variables, as demonstrated using PHP code in the _SESSION[apps][eyeOptions.eyeapp][wrapup] variable.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:eyeos_project:eyeos:0.8:*:*:*:*:*:*:*

cpe:2.3:o:eyeos_project:eyeos:0.8.1:*:*:*:*:*:*:*

cpe:2.3:o:eyeos_project:eyeos:0.8.1_r1:*:*:*:*:*:*:*

cpe:2.3:o:eyeos_project:eyeos:0.8.2:*:*:*:*:*:*:*

cpe:2.3:o:eyeos_project:eyeos:0.8.2_r1:*:*:*:*:*:*:*

cpe:2.3:o:eyeos_project:eyeos:0.8.2_r2:*:*:*:*:*:*:*

cpe:2.3:o:eyeos_project:eyeos:0.8.2_r3:*:*:*:*:*:*:*

cpe:2.3:o:eyeos_project:eyeos:0.8.3:*:*:*:*:*:*:*

cpe:2.3:o:eyeos_project:eyeos:0.8.3_r1:*:*:*:*:*:*:*

cpe:2.3:o:eyeos_project:eyeos:0.8.3_r2:*:*:*:*:*:*:*

cpe:2.3:o:eyeos_project:eyeos:0.8.4:*:*:*:*:*:*:*

cpe:2.3:o:eyeos_project:eyeos:0.8.4_r1:*:*:*:*:*:*:*

cpe:2.3:o:eyeos_project:eyeos:0.8.5:*:*:*:*:*:*:*

cpe:2.3:o:eyeos_project:eyeos:0.8.5_r1:*:*:*:*:*:*:*

cpe:2.3:o:eyeos_project:eyeos:0.8.6:*:*:*:*:*:*:*

cpe:2.3:o:eyeos_project:eyeos:0.8.7:*:*:*:*:*:*:*

cpe:2.3:o:eyeos_project:eyeos:0.8.8:*:*:*:*:*:*:*

cpe:2.3:o:eyeos_project:eyeos:0.8.9:*:*:*:*:*:*:*

EPSS

Процентиль: 79%

0.01269

Низкий

7.5 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-7xx2-j9qr-rjp6

github

почти 4 года назад