CVE

Id
20549  
CVE No.
CVE-2006-4445  
Status
Candidate  
Description
** DISPUTED ** Multiple PHP remote file inclusion vulnerabilities in CuteNews 1.3.x allow remote attackers to execute arbitrary PHP code via a URL in the cutepath parameter to (1) show_news.php or (2) search.php. NOTE: CVE analysis as of 20060829 has not identified any scenarios in which these vectors could result in remote file inclusion.  
Phase
Assigned (20060829)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
192950 20549 CVE-2006-4445 BUGTRAQ:20060825 CuteNews 1.3.* Remote File Include Vulnerability  View
192951 20549 CVE-2006-4445 URL:http://www.securityfocus.com/archive/1/archive/1/444385/100/0/threaded  View
192952 20549 CVE-2006-4445 BUGTRAQ:20060829 Re: CuteNews 1.3.* Remote File Include Vulnerability  View
192953 20549 CVE-2006-4445 URL:http://www.securityfocus.com/archive/1/archive/1/444733/100/0/threaded  View
192954 20549 CVE-2006-4445 BUGTRAQ:20060902 Re: CuteNews 1.3.* Remote File Include Vulnerability  View
192955 20549 CVE-2006-4445 URL:http://archives.neohapsis.com/archives/bugtraq/2006-09/0040.html  View
192956 20549 CVE-2006-4445 VIM:20060829 CuteNews 1.3.* Remote File Include Vulnerability  View
192957 20549 CVE-2006-4445 URL:http://www.attrition.org/pipermail/vim/2006-August/001000.html  View
192958 20549 CVE-2006-4445 OSVDB:29842  View
192959 20549 CVE-2006-4445 URL:http://www.osvdb.org/29842  View
192960 20549 CVE-2006-4445 XF:cutenews-search-file-include(28582)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
60814 JVNDB-2006-003080 libX11 などを含む X.Org および XFree86 における権限を取得される脆弱性 libX11、xdm、xf86dga、xinit、xload、xtrans、および xterm を含む X.Org および XFree86 は、権限を削除しようとしている際、setid および seteuid 呼び出しの返し値をチェックしないため、権限を取得される脆弱性が存在します。 CVE-2006-4447 20549 7.2 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003080.html  View