CVE

Id
19950  
CVE No.
CVE-2006-3846  
Status
Candidate  
Description
PHP remote file inclusion vulnerability in extadminmenus.class.php in the MultiBanners 1.0.1 for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.  
Phase
Assigned (20060725)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
183969 19950 CVE-2006-3846 BUGTRAQ:20060720 Com Multibanners Remote File Inclusion (mosConfig_absolute_path)  View
183970 19950 CVE-2006-3846 URL:http://www.securityfocus.com/archive/1/archive/1/440881/100/0/threaded  View
183971 19950 CVE-2006-3846 MISC:http://solpotcrew.org/adv/BlueSpy-adv-multibanners.txt  View
183972 19950 CVE-2006-3846 BID:19100  View
183973 19950 CVE-2006-3846 URL:http://www.securityfocus.com/bid/19100  View
183974 19950 CVE-2006-3846 VUPEN:ADV-2006-2933  View
183975 19950 CVE-2006-3846 URL:http://www.vupen.com/english/advisories/2006/2933  View
183976 19950 CVE-2006-3846 SECUNIA:21168  View
183977 19950 CVE-2006-3846 URL:http://secunia.com/advisories/21168  View
183978 19950 CVE-2006-3846 SREASON:1277  View
183979 19950 CVE-2006-3846 URL:http://securityreason.com/securityalert/1277  View
183980 19950 CVE-2006-3846 XF:multibanners-extadminmenus-file-include(27916)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
60647 JVNDB-2006-002913 IPCalc 用の CGI wrapper におけるクロスサイトスクリプティングの脆弱性 IP Calculater (IPCalc) 用の CGI wrapper には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2006-3848 19950 2.6 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-002913.html  View