Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2006-2675

Опубликовано: 30 мая 2006
Источник: nvd
CVSS2: 5.1
EPSS Низкий

Описание

PHP remote file inclusion vulnerability in ubbt.inc.php in UBBThreads 5.x and 6.x allows remote attackers to execute arbitrary PHP code via a URL in the (1) thispath or (2) configdir parameters.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ubbcentral:ubb.threads:*:*:*:*:*:*:*:*
Версия до 6.5.3 (включая)
cpe:2.3:a:ubbcentral:ubb.threads:3.4:*:*:*:*:*:*:*
cpe:2.3:a:ubbcentral:ubb.threads:3.5:*:*:*:*:*:*:*
cpe:2.3:a:ubbcentral:ubb.threads:5.0:*:*:*:*:*:*:*
cpe:2.3:a:ubbcentral:ubb.threads:5.5.1:*:*:*:*:*:*:*
cpe:2.3:a:ubbcentral:ubb.threads:6.0:*:*:*:*:*:*:*
cpe:2.3:a:ubbcentral:ubb.threads:6.0.1:*:*:*:*:*:*:*
cpe:2.3:a:ubbcentral:ubb.threads:6.0.2:*:*:*:*:*:*:*
cpe:2.3:a:ubbcentral:ubb.threads:6.0.3:*:*:*:*:*:*:*
cpe:2.3:a:ubbcentral:ubb.threads:6.1:*:*:*:*:*:*:*
cpe:2.3:a:ubbcentral:ubb.threads:6.1.1:*:*:*:*:*:*:*
cpe:2.3:a:ubbcentral:ubb.threads:6.2:*:*:*:*:*:*:*
cpe:2.3:a:ubbcentral:ubb.threads:6.2.1:*:*:*:*:*:*:*
cpe:2.3:a:ubbcentral:ubb.threads:6.2.2:*:*:*:*:*:*:*
cpe:2.3:a:ubbcentral:ubb.threads:6.2.3:*:*:*:*:*:*:*
cpe:2.3:a:ubbcentral:ubb.threads:6.3:*:*:*:*:*:*:*
cpe:2.3:a:ubbcentral:ubb.threads:6.3.1:*:*:*:*:*:*:*
cpe:2.3:a:ubbcentral:ubb.threads:6.4:*:*:*:*:*:*:*
cpe:2.3:a:ubbcentral:ubb.threads:6.4.1:*:*:*:*:*:*:*
cpe:2.3:a:ubbcentral:ubb.threads:6.4.2:*:*:*:*:*:*:*
cpe:2.3:a:ubbcentral:ubb.threads:6.4.3:*:*:*:*:*:*:*
cpe:2.3:a:ubbcentral:ubb.threads:6.4.4:*:*:*:*:*:*:*
cpe:2.3:a:ubbcentral:ubb.threads:6.5:*:*:*:*:*:*:*
cpe:2.3:a:ubbcentral:ubb.threads:6.5.1:*:*:*:*:*:*:*
cpe:2.3:a:ubbcentral:ubb.threads:6.5.1.1:*:*:*:*:*:*:*
cpe:2.3:a:ubbcentral:ubb.threads:6.5.2:*:*:*:*:*:*:*
cpe:2.3:a:ubbcentral:ubb.threads:6.5.2_beta2:*:*:*:*:*:*:*

EPSS

Процентиль: 82%
0.01676
Низкий

5.1 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

github
почти 4 года назад

PHP remote file inclusion vulnerability in ubbt.inc.php in UBBThreads 5.x and 6.x allows remote attackers to execute arbitrary PHP code via a URL in the (1) thispath or (2) configdir parameters.

EPSS

Процентиль: 82%
0.01676
Низкий

5.1 Medium

CVSS2

Дефекты

NVD-CWE-Other