CVE

Id
17923  
CVE No.
CVE-2006-1819  
Status
Candidate  
Description
Directory traversal vulnerability in the loadConfig function in index.php in phpWebSite 0.10.2 and earlier allows remote attackers to include arbitrary local files and execute arbitrary PHP code via the hub_dir parameter, as demonstrated by including access_log. NOTE: in some cases, arbitrary remote file inclusion could be performed under PHP 5 using an SMB share argument such as "\systemnamesharename".  
Phase
Assigned (20060417)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
152620 17923 CVE-2006-1819 MILW0RM:1673  View
152621 17923 CVE-2006-1819 URL:http://milw0rm.com/exploits/1673  View
152622 17923 CVE-2006-1819 MISC:http://downloads.securityfocus.com/vulnerabilities/exploits/PHPWebSite_fi_poc  View
152623 17923 CVE-2006-1819 GENTOO:GLSA-200605-04  View
152624 17923 CVE-2006-1819 URL:http://www.gentoo.org/security/en/glsa/glsa-200605-04.xml  View
152625 17923 CVE-2006-1819 BID:17521  View
152626 17923 CVE-2006-1819 URL:http://www.securityfocus.com/bid/17521  View
152627 17923 CVE-2006-1819 VUPEN:ADV-2006-1361  View
152628 17923 CVE-2006-1819 URL:http://www.vupen.com/english/advisories/2006/1361  View
152629 17923 CVE-2006-1819 SECTRACK:1015942  View
152630 17923 CVE-2006-1819 URL:http://securitytracker.com/id?1015942  View
152631 17923 CVE-2006-1819 SECUNIA:19647  View
152632 17923 CVE-2006-1819 URL:http://secunia.com/advisories/19647  View
152633 17923 CVE-2006-1819 SECUNIA:19914  View
152634 17923 CVE-2006-1819 URL:http://secunia.com/advisories/19914  View
152635 17923 CVE-2006-1819 XF:phpwebsite-index-hubdir-file-include(25867)  View

Related JVN