CVE

Id
19793  
CVE No.
CVE-2006-3689  
Status
Candidate  
Description
** DISPUTED ** PHP remote file inclusion vulnerability in user-func.php in Codeworks Gnomedia SubberZ[Lite] allows remote attackers to execute arbitrary PHP code via a URL in the myadmindir parameter. NOTE: this issue has been disputed by a third party that claims that " the myadmindir variable is set before any GET variables are processed."  
Phase
Assigned (20060718)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
179764 19793 CVE-2006-3689 BUGTRAQ:20060714 SubberZ[Lite] - Remote File Include  View
179765 19793 CVE-2006-3689 URL:http://www.securityfocus.com/archive/1/archive/1/440139/100/0/threaded  View
179766 19793 CVE-2006-3689 BUGTRAQ:20060717 Re: SubberZ[Lite] - Remote File Include  View
179767 19793 CVE-2006-3689 URL:http://www.securityfocus.com/archive/1/archive/1/440864/100/100/threaded  View
179768 19793 CVE-2006-3689 BID:18990  View
179769 19793 CVE-2006-3689 URL:http://www.securityfocus.com/bid/18990  View
179770 19793 CVE-2006-3689 OSVDB:28592  View
179771 19793 CVE-2006-3689 URL:http://www.osvdb.org/28592  View
179772 19793 CVE-2006-3689 SREASON:1246  View
179773 19793 CVE-2006-3689 URL:http://securityreason.com/securityalert/1246  View
179774 19793 CVE-2006-3689 XF:subberzlite-userfunc-file-include(27748)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
60549 JVNDB-2006-002815 VBZooM における SQL インジェクションの脆弱性 VBZooM には、SQL インジェクションの脆弱性が存在します。 CVE-2006-3691 19793 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-002815.html  View