CVE

Id
20260  
CVE No.
CVE-2006-4156  
Status
Candidate  
Description
** DISPUTED ** PHP remote file inclusion vulnerability in big.php in pearlabs mafia moblog 6 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the pathtotemplate parameter. NOTE: a third party claims that the researcher is incorrect, because template.php defines pathtotemplate before big.php uses pathtotemplate. CVE has not verified either claim, but during August 2006, the original researcher made several significant errors regarding this bug type.  
Phase
Assigned (20060816)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
187984 20260 CVE-2006-4156 BUGTRAQ:20060810 Mafia Moblog <= 6 (pathtotemplate) Remote File Inclusion Vulnerability  View
187985 20260 CVE-2006-4156 URL:http://www.securityfocus.com/archive/1/archive/1/442867/100/0/threaded  View
187986 20260 CVE-2006-4156 BUGTRAQ:20060811 Re: Mafia Moblog <= 6 (pathtotemplate) Remote File Inclusion Vulnerability  View
187987 20260 CVE-2006-4156 URL:http://www.securityfocus.com/archive/1/archive/1/443153/100/0/threaded  View
187988 20260 CVE-2006-4156 BID:19458  View
187989 20260 CVE-2006-4156 URL:http://www.securityfocus.com/bid/19458  View
187990 20260 CVE-2006-4156 SREASON:1391  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
60760 JVNDB-2006-003026 Spaminator の Login.php における PHP リモートファイルインクルージョンの脆弱性 Spaminator の Login.php には、PHP リモートファイルインクルージョンの脆弱性が存在します。 CVE-2006-4158 20260 5.1 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003026.html  View