CVE

Id
20743  
CVE No.
CVE-2006-4639  
Status
Candidate  
Description
Multiple PHP remote file inclusion vulnerabilities in C-News.fr C-News 1.0.1 and earlier, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the path parameter in (1) formulaire_commentaires.php, (2) affichage/liste_news.php, (3) affichage/news_complete.php, or (4) affichage/pagination.php. NOTE: the provenance of some of this information is unknown; some details are obtained from third party information.  
Phase
Assigned (20060908)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
196030 20743 CVE-2006-4639 BUGTRAQ:20060910 C-News v 1.0.1 < = Multiple Remote File Include Vulnerabilities  View
196031 20743 CVE-2006-4639 URL:http://www.securityfocus.com/archive/1/archive/1/445781/100/0/threaded  View
196032 20743 CVE-2006-4639 VUPEN:ADV-2006-3471  View
196033 20743 CVE-2006-4639 URL:http://www.vupen.com/english/advisories/2006/3471  View
196034 20743 CVE-2006-4639 SECUNIA:21758  View
196035 20743 CVE-2006-4639 URL:http://secunia.com/advisories/21758  View
196036 20743 CVE-2006-4639 XF:cnews-path-file-include(28766)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
59803 JVNDB-2006-002069 Muratsoft Haber Portal の kategori.asp における SQL インジェクションの脆弱性 Muratsoft Haber Portal の kategori.asp には、SQL インジェクションの脆弱性が存在します。 CVE-2006-4641 20743 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-002069.html  View