CVE

Id
20741  
CVE No.
CVE-2006-4637  
Status
Candidate  
Description
Multiple PHP remote file inclusion vulnerabilities in ACGV News 0.9.1 allow remote attackers to execute arbitrary PHP code via a URL in the PathNews parameter in (1) header.php or (2) news.php. NOTE: portions of these details are obtained from third party information.  
Phase
Assigned (20060908)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
196008 20741 CVE-2006-4637 BUGTRAQ:20060907 ACGV News v0.9.1 - Remote File Include Vulnerabilities  View
196009 20741 CVE-2006-4637 URL:http://www.securityfocus.com/archive/1/archive/1/445575/100/0/threaded  View
196010 20741 CVE-2006-4637 BID:19863  View
196011 20741 CVE-2006-4637 URL:http://www.securityfocus.com/bid/19863  View
196012 20741 CVE-2006-4637 VUPEN:ADV-2006-3475  View
196013 20741 CVE-2006-4637 URL:http://www.vupen.com/english/advisories/2006/3475  View
196014 20741 CVE-2006-4637 SECTRACK:1016816  View
196015 20741 CVE-2006-4637 URL:http://securitytracker.com/id?1016816  View
196016 20741 CVE-2006-4637 SECUNIA:21765  View
196017 20741 CVE-2006-4637 URL:http://secunia.com/advisories/21765  View
196018 20741 CVE-2006-4637 XF:acgvnews-pathnews-file-include(28763)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
58947 JVNDB-2006-001213 C-News.fr C-News における PHP リモートファイルインクルージョンの脆弱性 C-News.fr C-News は、register_globals が有効になっている際、PHP リモートファイルインクルージョンの脆弱性が存在します。 CVE-2006-4639 20741 5.1 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-001213.html  View