CVE-2006-2521

Опубликовано: 22 мая 2006

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

PHP remote file inclusion vulnerability in cron.php in phpMyDirectory 10.4.4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the ROOT_PATH parameter.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:accomplishtechnology:phpmydirectory:*:*:*:*:*:*:*:*

Версия до 10.4.4 (включая)

cpe:2.3:a:accomplishtechnology:phpmydirectory:1.0:*:*:*:*:*:*:*

cpe:2.3:a:accomplishtechnology:phpmydirectory:1.0.1:*:*:*:*:*:*:*

cpe:2.3:a:accomplishtechnology:phpmydirectory:1.0.2:*:*:*:*:*:*:*

cpe:2.3:a:accomplishtechnology:phpmydirectory:1.0.3:*:*:*:*:*:*:*

cpe:2.3:a:accomplishtechnology:phpmydirectory:1.0.4:*:*:*:*:*:*:*

cpe:2.3:a:accomplishtechnology:phpmydirectory:1.0.5:*:*:*:*:*:*:*

cpe:2.3:a:accomplishtechnology:phpmydirectory:1.0.6:*:*:*:*:*:*:*

cpe:2.3:a:accomplishtechnology:phpmydirectory:1.0.7:*:*:*:*:*:*:*

cpe:2.3:a:accomplishtechnology:phpmydirectory:1.0.8:*:*:*:*:*:*:*

cpe:2.3:a:accomplishtechnology:phpmydirectory:1.0.9:*:*:*:*:*:*:*

cpe:2.3:a:accomplishtechnology:phpmydirectory:1.1.0:*:*:*:*:*:*:*

cpe:2.3:a:accomplishtechnology:phpmydirectory:1.1.1:*:*:*:*:*:*:*

cpe:2.3:a:accomplishtechnology:phpmydirectory:1.1.2:*:*:*:*:*:*:*

cpe:2.3:a:accomplishtechnology:phpmydirectory:1.1.3:*:*:*:*:*:*:*

cpe:2.3:a:accomplishtechnology:phpmydirectory:1.1.4:*:*:*:*:*:*:*

cpe:2.3:a:accomplishtechnology:phpmydirectory:1.1.5:*:*:*:*:*:*:*

cpe:2.3:a:accomplishtechnology:phpmydirectory:1.1.6:*:*:*:*:*:*:*

cpe:2.3:a:accomplishtechnology:phpmydirectory:1.1.7:*:*:*:*:*:*:*

cpe:2.3:a:accomplishtechnology:phpmydirectory:1.1.8:*:*:*:*:*:*:*

cpe:2.3:a:accomplishtechnology:phpmydirectory:1.1.9:*:*:*:*:*:*:*

cpe:2.3:a:accomplishtechnology:phpmydirectory:1.2.0:*:*:*:*:*:*:*

cpe:2.3:a:accomplishtechnology:phpmydirectory:1.2.0:b:*:*:*:*:*:*

cpe:2.3:a:accomplishtechnology:phpmydirectory:1.2.1:*:*:*:*:*:*:*

cpe:2.3:a:accomplishtechnology:phpmydirectory:1.3.0:*:*:*:*:*:*:*

cpe:2.3:a:accomplishtechnology:phpmydirectory:1.3.0:b:*:*:*:*:*:*

cpe:2.3:a:accomplishtechnology:phpmydirectory:1.3.1:*:*:*:*:*:*:*

cpe:2.3:a:accomplishtechnology:phpmydirectory:1.3.2:*:*:*:*:*:*:*

cpe:2.3:a:accomplishtechnology:phpmydirectory:1.3.3:*:*:*:*:*:*:*

cpe:2.3:a:accomplishtechnology:phpmydirectory:1.3.4:*:*:*:*:*:*:*

cpe:2.3:a:accomplishtechnology:phpmydirectory:1.3.5:*:*:*:*:*:*:*

cpe:2.3:a:accomplishtechnology:phpmydirectory:1.4.0:*:*:*:*:*:*:*

cpe:2.3:a:accomplishtechnology:phpmydirectory:1.4.1:*:*:*:*:*:*:*

cpe:2.3:a:accomplishtechnology:phpmydirectory:10.1.3:*:*:*:*:*:*:*

EPSS

Процентиль: 91%

0.06708

Низкий

7.5 High

CVSS2

Дефекты

CWE-94

Связанные уязвимости

GHSA-j9mv-f35x-g5mv

github

почти 4 года назад