Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2006-4635

Опубликовано: 08 сент. 2006
Источник: nvd
CVSS2: 6.5
EPSS Низкий

Описание

Unspecified vulnerability in MySource Classic 2.14.6, and possibly earlier, allows remote authenticated users, with superuser privileges, to inject arbitrary PHP code via unspecified vectors related to the Equation attribute in Web_Extensions - Notitia (I/II). NOTE: due to lack of details, it is not clear whether this issue is file inclusion, static code injection, or another type of issue.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:squiz:mysource_classic:*:*:*:*:*:*:*:*
Версия до 2.14.6 (включая)

EPSS

Процентиль: 75%
0.00916
Низкий

6.5 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

github
почти 4 года назад

Unspecified vulnerability in MySource Classic 2.14.6, and possibly earlier, allows remote authenticated users, with superuser privileges, to inject arbitrary PHP code via unspecified vectors related to the Equation attribute in Web_Extensions - Notitia (I/II). NOTE: due to lack of details, it is not clear whether this issue is file inclusion, static code injection, or another type of issue.

EPSS

Процентиль: 75%
0.00916
Низкий

6.5 Medium

CVSS2

Дефекты

NVD-CWE-Other