CVE

Id
20739  
CVE No.
CVE-2006-4635  
Status
Candidate  
Description
Unspecified vulnerability in MySource Classic 2.14.6, and possibly earlier, allows remote authenticated users, with superuser privileges, to inject arbitrary PHP code via unspecified vectors related to the Equation attribute in Web_Extensions - Notitia (I/II). NOTE: due to lack of details, it is not clear whether this issue is file inclusion, static code injection, or another type of issue.  
Phase
Assigned (20060908)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
195993 20739 CVE-2006-4635 CONFIRM:http://classic.squiz.net/download/changelogs/change_log_2.14.8  View
195994 20739 CVE-2006-4635 BID:19868  View
195995 20739 CVE-2006-4635 URL:http://www.securityfocus.com/bid/19868  View
195996 20739 CVE-2006-4635 VUPEN:ADV-2006-3477  View
195997 20739 CVE-2006-4635 URL:http://www.vupen.com/english/advisories/2006/3477  View
195998 20739 CVE-2006-4635 SECUNIA:21757  View
195999 20739 CVE-2006-4635 URL:http://secunia.com/advisories/21757  View
196000 20739 CVE-2006-4635 XF:mysource-equation-code-execution(28768)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
58945 JVNDB-2006-001211 ACGV News における PHP リモートファイルインクルージョンの脆弱性 ACGV News には、PHP リモートファイルインクルージョンの脆弱性が存在します。 CVE-2006-4637 20739 5.1 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-001211.html  View