CVE

Id
20740  
CVE No.
CVE-2006-4636  
Status
Candidate  
Description
Directory traversal vulnerability in SZEWO PhpCommander 3.0 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the Directory parameter, as demonstrated by parameter values naming Apache HTTP Server log files that apparently contain PHP code.  
Phase
Assigned (20060908)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
196001 20740 CVE-2006-4636 MILW0RM:2310  View
196002 20740 CVE-2006-4636 URL:http://milw0rm.com/exploits/2310  View
196003 20740 CVE-2006-4636 BID:19867  View
196004 20740 CVE-2006-4636 URL:http://www.securityfocus.com/bid/19867  View
196005 20740 CVE-2006-4636 VUPEN:ADV-2006-3472  View
196006 20740 CVE-2006-4636 URL:http://www.vupen.com/english/advisories/2006/3472  View
196007 20740 CVE-2006-4636 SECUNIA:21753  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
58946 JVNDB-2006-001212 ACGV News の article.php における PHP リモートファイルインクルージョンの脆弱性 ACGV News の article.php には、PHP リモートファイルインクルージョンの脆弱性が存在します。 CVE-2006-4638 20740 5.1 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-001212.html  View