CVE

Id
19951  
CVE No.
CVE-2006-3847  
Status
Candidate  
Description
PHP remote file inclusion vulnerability in (1) admin.php, and possibly (2) details.php, (3) modify.php, (4) newgroup.php, (5) newtask.php, and (6) rss.php, in MoSpray (aka com_mospray) 1.8 RC1 allows remote attackers to execute arbitrary PHP code via a URL in the basedir parameter.  
Phase
Assigned (20060725)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
183981 19951 CVE-2006-3847 BUGTRAQ:20060723 [Kurdish Security # 14] MoSpray [base_dir] Remote Command Execution [ Mambo & Joomla]  View
183982 19951 CVE-2006-3847 URL:http://www.securityfocus.com/archive/1/archive/1/440939/100/200/threaded  View
183983 19951 CVE-2006-3847 MISC:http://kurdishsecurity.blogspot.com/2006/07/kurdish-security-14-mospray-basedir.html  View
183984 19951 CVE-2006-3847 MILW0RM:2062  View
183985 19951 CVE-2006-3847 URL:http://milw0rm.com/exploits/2062  View
183986 19951 CVE-2006-3847 BID:19122  View
183987 19951 CVE-2006-3847 URL:http://www.securityfocus.com/bid/19122  View
183988 19951 CVE-2006-3847 VUPEN:ADV-2006-2932  View
183989 19951 CVE-2006-3847 URL:http://www.vupen.com/english/advisories/2006/2932  View
183990 19951 CVE-2006-3847 SECUNIA:21166  View
183991 19951 CVE-2006-3847 URL:http://secunia.com/advisories/21166  View
183992 19951 CVE-2006-3847 XF:mospray-admin-file-include(27917)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
60648 JVNDB-2006-002914 Warzone 2100 および Warzone Resurrection におけるスタックベースのバッファオーバーフローの脆弱性 Warzone 2100 および Warzone Resurrection には、スタックベースのバッファオーバーフローの脆弱性が存在します。 CVE-2006-3849 19951 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-002914.html  View