CVE

Id
19173  
CVE No.
CVE-2006-3069  
Status
Candidate  
Description
** DISPUTED ** PHP remote file inclusion vulnerability in DoubleSpeak 0.1, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via the config[private] parameter in multiple files, as demonstrated by (1) index.php, (2) faq.php, and (3) hardware.php. NOTE: this issue has been disputed by multiple third-party researchers, who state that config[private] is initialized in an include file before being used.  
Phase
Assigned (20060619)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
170909 19173 CVE-2006-3069 BUGTRAQ:20060612 Re: igloo DoubleSpeak v 0.1 Multiple remote file inclusion  View
170910 19173 CVE-2006-3069 URL:http://archives.neohapsis.com/archives/bugtraq/2006-06/0184.html  View
170911 19173 CVE-2006-3069 VIM:20060723 Igloo DoublSpeak vuln  View
170912 19173 CVE-2006-3069 URL:http://attrition.org/pipermail/vim/2006-July/000935.html  View
170913 19173 CVE-2006-3069 MISC:http://www.aria-security.net/advisory/igloo/doublespeak.txt  View
170914 19173 CVE-2006-3069 BID:18401  View
170915 19173 CVE-2006-3069 URL:http://www.securityfocus.com/bid/18401  View
170916 19173 CVE-2006-3069 OSVDB:27436  View
170917 19173 CVE-2006-3069 URL:http://www.osvdb.org/27436  View
170918 19173 CVE-2006-3069 SECTRACK:1016278  View

Related JVN