CVE

Id
20781  
CVE No.
CVE-2006-4677  
Status
Candidate  
Description
** DISPUTED ** PHP remote file inclusion vulnerability in contrib/yabbse/poc.php in phpopenchat before 3.0.2 allows remote attackers to execute arbitrary PHP code via the sourcedir parameter. NOTE: this issue was disputed by a third-party researcher who stated that the _REQUEST parameters were dynamically unset at the beginning of the file. Another researcher noted, and CVE agrees, that the unset PHP function can be bypassed (CVE-2006-3017). If this issue is due to a vulnerability in PHP, then it should be excluded from CVE.  
Phase
Assigned (20060911)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
196484 20781 CVE-2006-4677 BUGTRAQ:20060906 WDT :-phpopenchat-3.0.* ($sourcedir) Remote File Inclusion Exploit  View
196485 20781 CVE-2006-4677 URL:http://www.securityfocus.com/archive/1/archive/1/445384/100/0/threaded  View
196486 20781 CVE-2006-4677 BUGTRAQ:20060907 Re: WDT :-phpopenchat-3.0.* ($sourcedir) Remote File Inclusion Exploit  View
196487 20781 CVE-2006-4677 URL:http://www.securityfocus.com/archive/1/archive/1/445522/100/0/threaded  View
196488 20781 CVE-2006-4677 BUGTRAQ:20060908 AW: WDT :-phpopenchat-3.0.* ($sourcedir) Remote File Inclusion Exploit  View
196489 20781 CVE-2006-4677 URL:http://www.securityfocus.com/archive/1/archive/1/445580/100/0/threaded  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
58961 JVNDB-2006-001227 DokuWiki における重要な情報を取得される脆弱性 DokuWiki は、ディフォルトでデバッグ機能が有効になるため、重要な情報を取得される脆弱性が存在します。 CVE-2006-4679 20781 5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-001227.html  View