CVE

Id
20453  
CVE No.
CVE-2006-4349  
Status
Candidate  
Description
** DISPUTED ** PHP remote file inclusion vulnerability in ToendaCMS 1.0.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the tcms_administer_site parameter to an unspecified script, probably index.php. NOTE: this issue has been disputed by a third party, who states that $tcms_administer_site is initialized to a constant value within index.php.  
Phase
Assigned (20060824)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
191712 20453 CVE-2006-4349 BUGTRAQ:20060820 ToendaCMS <= 1.0.3 -(tcms_administer_site) Remote File Include  View
191713 20453 CVE-2006-4349 URL:http://www.securityfocus.com/archive/1/archive/1/443918/100/0/threaded  View
191714 20453 CVE-2006-4349 BUGTRAQ:20060823 Re: ToendaCMS <= 1.0.3 -(tcms_administer_site) Remote File Include  View
191715 20453 CVE-2006-4349 URL:http://www.securityfocus.com/archive/1/444236/100/0/threaded  View
191716 20453 CVE-2006-4349 BID:19626  View
191717 20453 CVE-2006-4349 URL:http://www.securityfocus.com/bid/19626  View
191718 20453 CVE-2006-4349 OSVDB:29358  View
191719 20453 CVE-2006-4349 URL:http://www.osvdb.org/29358  View
191720 20453 CVE-2006-4349 XF:toendacms-administersite-file-include(28491)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
59735 JVNDB-2006-002001 OneOrZero の index.php におけるクロスサイトスクリプティングの脆弱性 OneOrZero の index.php には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2006-4351 20453 6.8 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-002001.html  View