CVE-2006-5636

Опубликовано: 01 нояб. 2006

Источник: nvd

CVSS2: 5.1

EPSS Средний

Описание

PHP remote file inclusion vulnerability in common.php in Simple Website Software (SWS) 0.99 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the SWSDIR parameter.

Ссылки

http://secunia.com/advisories/22618
Exploit
Vendor Advisory
http://securityreason.com/securityalert/1799
http://www.osvdb.org/30131
http://www.securityfocus.com/archive/1/450050/100/0/threaded
http://www.securityfocus.com/bid/20787
Exploit
http://www.vupen.com/english/advisories/2006/4262
https://exchange.xforce.ibmcloud.com/vulnerabilities/29861
https://www.exploit-db.com/exploits/2673
http://secunia.com/advisories/22618
Exploit
Vendor Advisory
http://securityreason.com/securityalert/1799
http://www.osvdb.org/30131
http://www.securityfocus.com/archive/1/450050/100/0/threaded
http://www.securityfocus.com/bid/20787
Exploit
http://www.vupen.com/english/advisories/2006/4262
https://exchange.xforce.ibmcloud.com/vulnerabilities/29861
https://www.exploit-db.com/exploits/2673

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:sws:simple_website_software:*:*:*:*:*:*:*:*

Версия до 0.99 (включая)

EPSS

Процентиль: 95%

0.16523

Средний

5.1 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-mr5m-vxx6-ghcf

github

почти 4 года назад