CVE

Id
20467  
CVE No.
CVE-2006-4363  
Status
Candidate  
Description
PHP remote file inclusion vulnerability in admin.cropcanvas.php in the CropImage component (com_cropimage) 1.0 for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the cropimagedir parameter.  
Phase
Assigned (20060825)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
191832 20467 CVE-2006-4363 BUGTRAQ:20060819 Mambo com_cropimage 1.0 Component Remote Include Vulnerability  View
191833 20467 CVE-2006-4363 URL:http://www.securityfocus.com/archive/1/archive/1/443762/100/0/threaded  View
191834 20467 CVE-2006-4363 MILW0RM:2217  View
191835 20467 CVE-2006-4363 URL:http://milw0rm.com/exploits/2217  View
191836 20467 CVE-2006-4363 BID:19605  View
191837 20467 CVE-2006-4363 URL:http://www.securityfocus.com/bid/19605  View
191838 20467 CVE-2006-4363 SREASON:1450  View
191839 20467 CVE-2006-4363 URL:http://securityreason.com/securityalert/1450  View
191840 20467 CVE-2006-4363 XF:cropimage-admincropcanvas-file-include(28465)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
60805 JVNDB-2006-003071 VistaBB における PHP リモートファイルインクルージョンの脆弱性 VistaBB には、PHP リモートファイルインクルージョンの脆弱性が存在します。 CVE-2006-4365 20467 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003071.html  View