CVE

Id
18953  
CVE No.
CVE-2006-2849  
Status
Candidate  
Description
PHP remote file inclusion vulnerability in includes/webdav/server.php in Bytehoard 2.1 Epsilon/Delta allows remote attackers to execute arbitrary PHP code via a URL in the bhconfig[bhfilepath] parameter.  
Phase
Assigned (20060605)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
167628 18953 CVE-2006-2849 BUGTRAQ:20060602 Bytehoard 2.1 Remote File Include  View
167629 18953 CVE-2006-2849 URL:http://www.securityfocus.com/archive/1/archive/1/435728/100/0/threaded  View
167630 18953 CVE-2006-2849 MILW0RM:1860  View
167631 18953 CVE-2006-2849 URL:http://milw0rm.com/exploits/1860  View
167632 18953 CVE-2006-2849 BID:18234  View
167633 18953 CVE-2006-2849 URL:http://www.securityfocus.com/bid/18234  View
167634 18953 CVE-2006-2849 VUPEN:ADV-2006-2110  View
167635 18953 CVE-2006-2849 URL:http://www.vupen.com/english/advisories/2006/2110  View
167636 18953 CVE-2006-2849 OSVDB:25948  View
167637 18953 CVE-2006-2849 URL:http://www.osvdb.org/25948  View
167638 18953 CVE-2006-2849 SECTRACK:1016207  View
167639 18953 CVE-2006-2849 URL:http://securitytracker.com/id?1016207  View
167640 18953 CVE-2006-2849 SECUNIA:20400  View
167641 18953 CVE-2006-2849 URL:http://secunia.com/advisories/20400  View
167642 18953 CVE-2006-2849 XF:bytehoard-bhfilepath-file-include(26936)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
58426 JVNDB-2006-000622 dotProject におけるクロスサイトスクリプティングの脆弱性 オープンソースのプロジェクト管理ツールである dotProject には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2006-2851 18953 4.3 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000622.html  View