CVE

Id
20165  
CVE No.
CVE-2006-4061  
Status
Candidate  
Description
** DISPUTED ** PHP remote file inclusion vulnerability in index.php in Thomas Pequet phpPrintAnalyzer 1.1, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the rep_par_rapport_racine parameter. NOTE: this issue has been disputed by third party researchers, stating that the rep_par_rapport_racine variable is initialized before use.  
Phase
Assigned (20060809)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
186759 20165 CVE-2006-4061 BUGTRAQ:20060807 phpPrintAnalyzer <= 1.1 (rep_par_rapport_racine) Remote File Inclusion Vulnerability  View
186760 20165 CVE-2006-4061 URL:http://www.securityfocus.com/archive/1/archive/1/442492/100/0/threaded  View
186761 20165 CVE-2006-4061 BUGTRAQ:20060814 Re: phpPrintAnalyzer <= 1.1 (rep_par_rapport_racine) Remote File Inclusion Vulnerability  View
186762 20165 CVE-2006-4061 URL:http://archives.neohapsis.com/archives/bugtraq/2006-08/0305.html  View
186763 20165 CVE-2006-4061 BID:19397  View
186764 20165 CVE-2006-4061 URL:http://www.securityfocus.com/bid/19397  View
186765 20165 CVE-2006-4061 OSVDB:29133  View
186766 20165 CVE-2006-4061 URL:http://www.osvdb.org/29133  View
186767 20165 CVE-2006-4061 SECTRACK:1016652  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
58793 JVNDB-2006-001059 Csaba Godor SAPID Blog Beta における PHP リモートファイルインクルージョンの脆弱性 Csaba Godor SAPID Blog Beta には、PHP リモートファイルインクルージョンの脆弱性が存在します。 CVE-2006-4063 20165 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-001059.html  View