CVE

Id
20735  
CVE No.
CVE-2006-4631  
Status
Candidate  
Description
Direct static code injection vulnerability in admin/save_opt.php in SoftBB 0.1, and possibly earlier, allows remote authenticated users to upload and execute arbitrary PHP code via the cache_forum parameter, which saves the code to info_options.php, which is accessible via a direct request.  
Phase
Assigned (20060908)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
195938 20735 CVE-2006-4631 BUGTRAQ:20060904 SoftBB 0.1 Remote PHP Code Execution Exploit  View
195939 20735 CVE-2006-4631 URL:http://www.securityfocus.com/archive/1/archive/1/445087/100/0/threaded  View
195940 20735 CVE-2006-4631 MISC:http://acid-root.new.fr/advisories/10060904.txt  View
195941 20735 CVE-2006-4631 MILW0RM:2300  View
195942 20735 CVE-2006-4631 URL:http://milw0rm.com/exploits/2300  View
195943 20735 CVE-2006-4631 VUPEN:ADV-2006-3478  View
195944 20735 CVE-2006-4631 URL:http://www.vupen.com/english/advisories/2006/3478  View
195945 20735 CVE-2006-4631 OSVDB:28579  View
195946 20735 CVE-2006-4631 URL:http://www.osvdb.org/28579  View
195947 20735 CVE-2006-4631 SECTRACK:1016785  View
195948 20735 CVE-2006-4631 URL:http://securitytracker.com/id?1016785  View
195949 20735 CVE-2006-4631 SECUNIA:21761  View
195950 20735 CVE-2006-4631 URL:http://secunia.com/advisories/21761  View
195951 20735 CVE-2006-4631 SREASON:1521  View
195952 20735 CVE-2006-4631 URL:http://securityreason.com/securityalert/1521  View
195953 20735 CVE-2006-4631 XF:softbb-admin-file-include(28749)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
60861 JVNDB-2006-003127 SoftBB の index.php におけるインストールパスを取得される脆弱性 SoftBB の index.php には、インストールパスを取得される脆弱性が存在します。 CVE-2006-4633 20735 5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003127.html  View