CVE

Id
19240  
CVE No.
CVE-2006-3136  
Status
Candidate  
Description
** DISPUTED ** Multiple PHP remote file inclusion vulnerabilities in Nucleus 3.23 allow remote attackers to execute arbitrary PHP code via a URL the DIR_LIBS parameter in (1) path/action.php, and to files in path/nucleus including (2) media.php, (3) /xmlrpc/server.php, and (4) /xmlrpc/api_metaweblog.inc.php. NOTE: this is a similar vulnerability to CVE-2006-2583. NOTE: this issue has been disputed by third parties, who state that the DIR_LIBS parameter is defined in an include file before being used.  
Phase
Assigned (20060622)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
172111 19240 CVE-2006-3136 BUGTRAQ:20060616 file include exploits in nucleus 3.23  View
172112 19240 CVE-2006-3136 URL:http://www.securityfocus.com/archive/1/archive/1/437423/100/0/threaded  View
172113 19240 CVE-2006-3136 BUGTRAQ:20060617 Re: file include exploits in nucleus 3.23  View
172114 19240 CVE-2006-3136 URL:http://www.securityfocus.com/archive/1/archive/1/437986/100/200/threaded  View
172115 19240 CVE-2006-3136 BID:18475  View
172116 19240 CVE-2006-3136 URL:http://www.securityfocus.com/bid/18475  View
172117 19240 CVE-2006-3136 VUPEN:ADV-2006-2408  View
172118 19240 CVE-2006-3136 URL:http://www.vupen.com/english/advisories/2006/2408  View
172119 19240 CVE-2006-3136 OSVDB:27502  View
172120 19240 CVE-2006-3136 URL:http://www.osvdb.org/27502  View
172121 19240 CVE-2006-3136 SECTRACK:1016325  View
172122 19240 CVE-2006-3136 URL:http://securitytracker.com/id?1016325  View
172123 19240 CVE-2006-3136 SREASON:1120  View

Related JVN