CVE

Id
20526  
CVE No.
CVE-2006-4422  
Status
Candidate  
Description
** DISPUTED ** PHP remote file inclusion vulnerability in includes/phpdig/libs/search_function.php in Jetbox CMS 2.1 allows remote attackers to execute arbitrary PHP code via a URL in the relative_script_path parameter, a different vector than CVE-2006-2270. NOTE: this issue has been disputed, and as of 20060830, CVE analysis concurs with the dispute. In addition, it is likely that the vulnerability is actually in a third party module, phpDig 1.8.8.  
Phase
Assigned (20060828)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
192631 20526 CVE-2006-4422 BUGTRAQ:20060825 Jetbox CMS search_function.php Remote File  View
192632 20526 CVE-2006-4422 URL:http://www.securityfocus.com/archive/1/archive/1/444422/100/0/threaded  View
192633 20526 CVE-2006-4422 BUGTRAQ:20060828 JetBox cms (search_function.php) Remote File Include  View
192634 20526 CVE-2006-4422 URL:http://www.securityfocus.com/archive/1/archive/1/444527/100/0/threaded  View
192635 20526 CVE-2006-4422 BUGTRAQ:20060829 AW: JetBox cms (search_function.php) Remote File Include  View
192636 20526 CVE-2006-4422 URL:http://www.securityfocus.com/archive/1/444640/100/0/threaded  View
192637 20526 CVE-2006-4422 BUGTRAQ:20060829 Re: AW: JetBox cms (search_function.php) Remote File Include  View
192638 20526 CVE-2006-4422 URL:http://www.securityfocus.com/archive/1/archive/1/444740/100/0/threaded  View
192639 20526 CVE-2006-4422 BUGTRAQ:20060830 Re: JetBox cms (search_function.php) Remote File Include  View
192640 20526 CVE-2006-4422 URL:http://www.securityfocus.com/archive/1/archive/1/444822/100/0/threaded  View
192641 20526 CVE-2006-4422 BUGTRAQ:20060831 AW: AW: JetBox cms (search_function.php) Remote File Include  View
192642 20526 CVE-2006-4422 URL:http://www.securityfocus.com/archive/1/archive/1/444826/100/0/threaded  View
192643 20526 CVE-2006-4422 VIM:20060829 Jetbox CMS file include - CVE dispute  View
192644 20526 CVE-2006-4422 URL:http://www.attrition.org/pipermail/vim/2006-August/000997.html  View
192645 20526 CVE-2006-4422 VIM:20060829 Jetbox CMS file include - CVE dispute  View
192646 20526 CVE-2006-4422 URL:http://www.attrition.org/pipermail/vim/2006-August/001003.html  View
192647 20526 CVE-2006-4422 BID:19722  View
192648 20526 CVE-2006-4422 URL:http://www.securityfocus.com/bid/19722  View
192649 20526 CVE-2006-4422 OSVDB:28299  View
192650 20526 CVE-2006-4422 URL:http://www.osvdb.org/28299  View
192651 20526 CVE-2006-4422 SECTRACK:1016765  View
192652 20526 CVE-2006-4422 URL:http://securitytracker.com/id?1016765  View
192653 20526 CVE-2006-4422 XF:jetboxcms-search-file-include(28588)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
58893 JVNDB-2006-001159 phpCOIN の coin_includes/constants.php における PHP リモートファイルインクルージョンの脆弱性 phpCOIN の coin_includes/constants.php は、PHP リモートファイルインクルージョンの脆弱性が存在します。 CVE-2006-4424 20526 5.1 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-001159.html  View