CVE

Id
18956  
CVE No.
CVE-2006-2852  
Status
Candidate  
Description
PHP remote file inclusion vulnerability in dotWidget CMS 1.0.6 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the file_path parameter in (1) index.php, (2) feedback.php, and (3) printfriendly.php.  
Phase
Assigned (20060605)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
167663 18956 CVE-2006-2852 BUGTRAQ:20060603 [MajorSecurity #7]dotWidget CMS <= 1.0.6 - Remote File Include Vulnerability  View
167664 18956 CVE-2006-2852 URL:http://www.securityfocus.com/archive/1/archive/1/435870/100/0/threaded  View
167665 18956 CVE-2006-2852 MISC:http://www.majorsecurity.de/advisory/major_rls7.txt  View
167666 18956 CVE-2006-2852 BID:18258  View
167667 18956 CVE-2006-2852 URL:http://www.securityfocus.com/bid/18258  View
167668 18956 CVE-2006-2852 VUPEN:ADV-2006-2141  View
167669 18956 CVE-2006-2852 URL:http://www.vupen.com/english/advisories/2006/2141  View
167670 18956 CVE-2006-2852 OSVDB:25981  View
167671 18956 CVE-2006-2852 URL:http://www.osvdb.org/25981  View
167672 18956 CVE-2006-2852 OSVDB:25982  View
167673 18956 CVE-2006-2852 URL:http://www.osvdb.org/displayvuln.php?osvdb_id=25982  View
167674 18956 CVE-2006-2852 OSVDB:25983  View
167675 18956 CVE-2006-2852 URL:http://www.osvdb.org/25983  View
167676 18956 CVE-2006-2852 SECTRACK:1016220  View
167677 18956 CVE-2006-2852 URL:http://securitytracker.com/id?1016220  View
167678 18956 CVE-2006-2852 SECUNIA:20463  View
167679 18956 CVE-2006-2852 URL:http://secunia.com/advisories/20463  View
167680 18956 CVE-2006-2852 SREASON:1045  View
167681 18956 CVE-2006-2852 URL:http://securityreason.com/securityalert/1045  View
167682 18956 CVE-2006-2852 XF:dotwidget-filepath-file-include(26918)  View

Related JVN