CVE

Id
20952  
CVE No.
CVE-2006-4848  
Status
Candidate  
Description
** DISPUTED ** Multiple PHP remote file inclusion vulnerabilities in Brian Fraval Hitweb 3.0 allow remote attackers to execute arbitrary PHP code via a URL in the REP_CLASS parameter to (1) index.php, (2) arbo.php, (3) framepoint.php, (4) genpage.php, (5) lienvalider.php, (6) appreciation.php, (7) partenariat.php, (8) rechercher.php, (9) projet.php, (10) propoexample.php, (11) refererpoint.php, or (12) top50.php. NOTE: this issue has been disputed by a third party researcher, stating that REP_CLASS is initialized in an included file before being used.  
Phase
Assigned (20060918)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
198532 20952 CVE-2006-4848 BUGTRAQ:20060915 HitWeb v3.0 - Remote File Include Vulnerabilities  View
198533 20952 CVE-2006-4848 URL:http://www.securityfocus.com/archive/1/archive/1/446219/100/0/threaded  View
198534 20952 CVE-2006-4848 BUGTRAQ:20060920 Re: HitWeb v3.0 - Remote File Include Vulnerabilities  View
198535 20952 CVE-2006-4848 URL:http://www.securityfocus.com/archive/1/archive/1/446567/100/200/threaded  View
198536 20952 CVE-2006-4848 BID:20060  View
198537 20952 CVE-2006-4848 URL:http://www.securityfocus.com/bid/20060  View
198538 20952 CVE-2006-4848 SREASON:1590  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
59003 JVNDB-2006-001269 BolinOS の system/_b/contentFiles/gBIndex.php における PHP リモートファイルインクルージョンの脆弱性 BolinOS の system/_b/contentFiles/gBIndex.php には、PHP リモートファイルインクルージョンの脆弱性が存在します。 CVE-2006-4850 20952 5.1 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-001269.html  View