CVE-2006-4610

Опубликовано: 07 сент. 2006

Источник: nvd

CVSS2: 5.1

EPSS Средний

Описание

PHP remote file inclusion vulnerability in index.php in GrapAgenda 0.11 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via the page parameter.

Ссылки

http://kurdishsecurity.blogspot.com/2006/09/kurdish-security-25-grapagenda-remote.html
Exploit
http://secunia.com/advisories/21775
Vendor Advisory
http://securityreason.com/securityalert/1513
http://securitytracker.com/id?1016812
http://www.osvdb.org/28553
http://www.securityfocus.com/archive/1/445176/100/0/threaded
http://www.securityfocus.com/bid/19857
http://www.vupen.com/english/advisories/2006/3469
https://exchange.xforce.ibmcloud.com/vulnerabilities/28722
https://www.exploit-db.com/exploits/2304
http://kurdishsecurity.blogspot.com/2006/09/kurdish-security-25-grapagenda-remote.html
Exploit
http://secunia.com/advisories/21775
Vendor Advisory
http://securityreason.com/securityalert/1513
http://securitytracker.com/id?1016812
http://www.osvdb.org/28553
http://www.securityfocus.com/archive/1/445176/100/0/threaded
http://www.securityfocus.com/bid/19857
http://www.vupen.com/english/advisories/2006/3469
https://exchange.xforce.ibmcloud.com/vulnerabilities/28722
https://www.exploit-db.com/exploits/2304

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:graphiks:grapagenda:*:*:*:*:*:*:*:*

Версия до 0.11 (включая)

EPSS

Процентиль: 95%

0.17062

Средний

5.1 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-3p9w-7x8w-2m9v

github

почти 4 года назад