CVE

Id
17649  
CVE No.
CVE-2006-1545  
Status
Candidate  
Description
Direct static code injection vulnerability in admin/config.php in vscripts (aka Kuba Kunkiewicz) VNews 1.2 allows remote authenticated administrators to execute code by inserting the code into variables that are stored in admin/config.php.  
Phase
Assigned (20060330)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
147616 17649 CVE-2006-1545 BUGTRAQ:20060411 [eVuln] VNews Multiple Vulnerabilities  View
147617 17649 CVE-2006-1545 URL:http://www.securityfocus.com/archive/1/archive/1/430674/100/0/threaded  View
147618 17649 CVE-2006-1545 MISC:http://www.evuln.com/vulns/112  View
147619 17649 CVE-2006-1545 VUPEN:ADV-2006-1173  View
147620 17649 CVE-2006-1545 URL:http://www.vupen.com/english/advisories/2006/1173  View
147621 17649 CVE-2006-1545 OSVDB:24276  View
147622 17649 CVE-2006-1545 URL:http://www.osvdb.org/24276  View
147623 17649 CVE-2006-1545 SECUNIA:19435  View
147624 17649 CVE-2006-1545 URL:http://secunia.com/advisories/19435  View
147625 17649 CVE-2006-1545 XF:vnews-config-file-include(25531)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
58733 JVNDB-2006-000999 Apache Struts (with BeanUtils) の ActionForm におけるサービス運用妨害 (DoS) の脆弱性 Apache Struts (with BeanUtils) の ActionForm にはサービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2006-1547 17649 7.8 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000999.html  View