CVE

Id
18427  
CVE No.
CVE-2006-2323  
Status
Candidate  
Description
Multiple PHP remote file inclusion vulnerabilities in SmartISoft phpListPro 2.01 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the returnpath parameter in (1) editsite.php, (2) addsite.php, and (3) in.php. NOTE: The config.php vector is already covered by CVE-2006-1749.  
Phase
Assigned (20060511)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
160045 18427 CVE-2006-2323 BUGTRAQ:20060508 PhpListPro 2.01 Remote File Include Vulnerability  View
160046 18427 CVE-2006-2323 URL:http://www.securityfocus.com/archive/1/archive/1/433562/100/0/threaded  View
160047 18427 CVE-2006-2323 BUGTRAQ:20060508 [MajorSecurity] phpListPro <= 2.01 - Multiple Remote File Include Vulnerability  View
160048 18427 CVE-2006-2323 URL:http://www.securityfocus.com/archive/1/archive/1/433285/100/0/threaded  View
160049 18427 CVE-2006-2323 OSVDB:25905  View
160050 18427 CVE-2006-2323 URL:http://www.osvdb.org/25905  View
160051 18427 CVE-2006-2323 OSVDB:25906  View
160052 18427 CVE-2006-2323 URL:http://www.osvdb.org/25906  View
160053 18427 CVE-2006-2323 OSVDB:25904  View
160054 18427 CVE-2006-2323 URL:http://www.osvdb.org/25904  View
160055 18427 CVE-2006-2323 SECTRACK:1016060  View
160056 18427 CVE-2006-2323 URL:http://securitytracker.com/id?1016060  View
160057 18427 CVE-2006-2323 SREASON:156  View
160058 18427 CVE-2006-2323 URL:http://securityreason.com/securityalert/156  View
160059 18427 CVE-2006-2323 SREASON:688  View
160060 18427 CVE-2006-2323 URL:http://securityreason.com/securityalert/688  View
160061 18427 CVE-2006-2323 SREASON:882  View
160062 18427 CVE-2006-2323 URL:http://securityreason.com/securityalert/882  View
160063 18427 CVE-2006-2323 XF:phplistpro-multiple-file-include(26359)  View

Related JVN