CVE

Id
20760  
CVE No.
CVE-2006-4656  
Status
Candidate  
Description
PHP remote file inclusion vulnerability in admin/editeur/spaw_control.class.php in Web Provence SL_Site 1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the spaw_root parameter. NOTE: CVE analysis suggests that this issue is actually in a third party product, SPAW Editor PHP Edition.  
Phase
Assigned (20060908)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
196240 20760 CVE-2006-4656 BUGTRAQ:20060907 SL_Site <= 1.0 [spaw_root] Remote File Include Vulnerability  View
196241 20760 CVE-2006-4656 URL:http://www.securityfocus.com/archive/1/archive/1/445520/100/0/threaded  View
196242 20760 CVE-2006-4656 MILW0RM:2317  View
196243 20760 CVE-2006-4656 URL:http://milw0rm.com/exploits/2317  View
196244 20760 CVE-2006-4656 CONFIRM:http://spaw.cvs.sourceforge.net/spaw/spaw/docs/ChangeLog.txt?view=markup  View
196245 20760 CVE-2006-4656 MISC:http://spaw.cvs.sourceforge.net/spaw/spaw/spaw_control.class.php?r1=1.19&r2=1.20  View
196246 20760 CVE-2006-4656 MISC:http://spaw.cvs.sourceforge.net/spaw/spaw/spaw_control.class.php?r1=1.25&r2=1.26  View
196247 20760 CVE-2006-4656 BID:19892  View
196248 20760 CVE-2006-4656 URL:http://www.securityfocus.com/bid/19892  View
196249 20760 CVE-2006-4656 SECTRACK:1016814  View
196250 20760 CVE-2006-4656 URL:http://securitytracker.com/id?1016814  View
196251 20760 CVE-2006-4656 SREASON:1522  View
196252 20760 CVE-2006-4656 URL:http://securityreason.com/securityalert/1522  View
196253 20760 CVE-2006-4656 XF:slsite-spaw-file-include(28783)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
59805 JVNDB-2006-002071 Panda Platinum Internet Security におけるメールの使用パターンを特定される脆弱性 Panda Platinum Internet Security は、ユーザがメッセージを返信する際、フィルタされていない生成された URL 内で連続するメッセージ番号を使用するため、メールの使用パターンを特定される脆弱性が存在します。 CVE-2006-4658 20760 5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-002071.html  View