CVE

Id
20751  
CVE No.
CVE-2006-4647  
Status
Candidate  
Description
PHP remote file inclusion vulnerability in news.php in Sponge News 2.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the sndir parameter.  
Phase
Assigned (20060908)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
196126 20751 CVE-2006-4647 MILW0RM:2309  View
196127 20751 CVE-2006-4647 URL:http://milw0rm.com/exploits/2309  View
196128 20751 CVE-2006-4647 BID:19862  View
196129 20751 CVE-2006-4647 URL:http://www.securityfocus.com/bid/19862  View
196130 20751 CVE-2006-4647 VUPEN:ADV-2006-3474  View
196131 20751 CVE-2006-4647 URL:http://www.vupen.com/english/advisories/2006/3474  View
196132 20751 CVE-2006-4647 OSVDB:28554  View
196133 20751 CVE-2006-4647 URL:http://www.osvdb.org/28554  View
196134 20751 CVE-2006-4647 SECUNIA:21760  View
196135 20751 CVE-2006-4647 URL:http://secunia.com/advisories/21760  View
196136 20751 CVE-2006-4647 XF:spongenews-news-file-include(28758)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
58952 JVNDB-2006-001218 BP News の bp_news.php における PHP リモートファイルインクルージョンの脆弱性 BinGo News (BP News) の bp_news.php には、PHP リモートファイルインクルージョンの脆弱性が存在します。 CVE-2006-4649 20751 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-001218.html  View