CVE-2006-5865

Опубликовано: 11 нояб. 2006

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

PHP remote file inclusion vulnerability in language.inc.php in MyAlbum 3.02 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the langs_dir parameter.

Ссылки

http://secunia.com/advisories/22619
Vendor Advisory
http://www.osvdb.org/30280
http://www.securityfocus.com/archive/1/452140
http://www.securityfocus.com/bid/21187
http://www.vupen.com/english/advisories/2006/4427
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/30169
https://www.exploit-db.com/exploits/2747
http://secunia.com/advisories/22619
Vendor Advisory
http://www.osvdb.org/30280
http://www.securityfocus.com/archive/1/452140
http://www.securityfocus.com/bid/21187
http://www.vupen.com/english/advisories/2006/4427
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/30169
https://www.exploit-db.com/exploits/2747

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:damien_benier:myalbum:*:*:*:*:*:*:*:*

Версия до 3.02 (включая)

EPSS

Процентиль: 93%

0.09488

Низкий

7.5 High

CVSS2

Дефекты

CWE-94

Связанные уязвимости

GHSA-rf9h-7q34-q897

github

почти 4 года назад