CVE

Id
18947  
CVE No.
CVE-2006-2843  
Status
Candidate  
Description
PHP remote file inclusion vulnerability in Redaxo 2.7.4 allows remote attackers to execute arbitrary PHP code via a URL in the (1) REX[INCLUDE_PATH] parameter in (a) addons/import_export/pages/index.inc.php and (b) pages/community.inc.php.  
Phase
Assigned (20060605)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
167568 18947 CVE-2006-2843 BUGTRAQ:20060602 Redaxo CMS <= 3.2 Remote File Include  View
167569 18947 CVE-2006-2843 URL:http://www.securityfocus.com/archive/1/archive/1/435733/100/0/threaded  View
167570 18947 CVE-2006-2843 MILW0RM:1861  View
167571 18947 CVE-2006-2843 URL:http://milw0rm.com/exploits/1861  View
167572 18947 CVE-2006-2843 BID:18229  View
167573 18947 CVE-2006-2843 URL:http://www.securityfocus.com/bid/18229  View
167574 18947 CVE-2006-2843 VUPEN:ADV-2006-2109  View
167575 18947 CVE-2006-2843 URL:http://www.vupen.com/english/advisories/2006/2109  View
167576 18947 CVE-2006-2843 SECTRACK:1016213  View
167577 18947 CVE-2006-2843 URL:http://securitytracker.com/id?1016213  View
167578 18947 CVE-2006-2843 SECUNIA:20408  View
167579 18947 CVE-2006-2843 URL:http://secunia.com/advisories/20408  View
167580 18947 CVE-2006-2843 SREASON:1043  View
167581 18947 CVE-2006-2843 URL:http://securityreason.com/securityalert/1043  View
167582 18947 CVE-2006-2843 XF:redaxo-rex-file-include(26887)  View

Related JVN