CVE

Id
20734  
CVE No.
CVE-2006-4630  
Status
Candidate  
Description
PHP remote file inclusion vulnerability in jscript.php in Sky GUNNING MySpeach 3.0.2 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the my_ms[root] parameter.  
Phase
Assigned (20060908)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
195928 20734 CVE-2006-4630 MILW0RM:2301  View
195929 20734 CVE-2006-4630 URL:http://milw0rm.com/exploits/2301  View
195930 20734 CVE-2006-4630 CONFIRM:http://www.comscripts.com/scripts/php.myspeach.1386.html  View
195931 20734 CVE-2006-4630 BID:19851  View
195932 20734 CVE-2006-4630 URL:http://www.securityfocus.com/bid/19851  View
195933 20734 CVE-2006-4630 VUPEN:ADV-2006-3468  View
195934 20734 CVE-2006-4630 URL:http://www.vupen.com/english/advisories/2006/3468  View
195935 20734 CVE-2006-4630 SECUNIA:21777  View
195936 20734 CVE-2006-4630 URL:http://secunia.com/advisories/21777  View
195937 20734 CVE-2006-4630 XF:myspeach-jscript-file-include(28721)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
60860 JVNDB-2006-003126 SoftBB における SQL インジェクションの脆弱性 SoftBB には、SQL インジェクションの脆弱性が存在します。 CVE-2006-4632 20734 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003126.html  View