CVE

Id
18712  
CVE No.
CVE-2006-2608  
Status
Candidate  
Description
artmedic newsletter 4.1 and possibly other versions, when register_globals is enabled, allows remote attackers to modify arbitrary files and execute arbitrary PHP code via the logfile parameter in a direct request to log.php, which causes the $logfile variable to be redefined to an attacker-controlled value, as demonstrated by injecting PHP code into info.php.  
Phase
Assigned (20060525)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
163656 18712 CVE-2006-2608 BUGTRAQ:20060519 Remote Code Execution in artmedic Newsletter 4.1 [log.php]  View
163657 18712 CVE-2006-2608 URL:http://www.securityfocus.com/archive/1/archive/1/434738/100/0/threaded  View
163658 18712 CVE-2006-2608 BID:18047  View
163659 18712 CVE-2006-2608 URL:http://www.securityfocus.com/bid/18047  View
163660 18712 CVE-2006-2608 VUPEN:ADV-2006-1930  View
163661 18712 CVE-2006-2608 URL:http://www.vupen.com/english/advisories/2006/1930  View
163662 18712 CVE-2006-2608 SECUNIA:20204  View
163663 18712 CVE-2006-2608 URL:http://secunia.com/advisories/20204  View
163664 18712 CVE-2006-2608 SREASON:957  View
163665 18712 CVE-2006-2608 URL:http://securityreason.com/securityalert/957  View
163666 18712 CVE-2006-2608 XF:artmedic-newsletter-code-execution(26597)  View

Related JVN