CVE

Id
20974  
CVE No.
CVE-2006-4870  
Status
Candidate  
Description
Multiple PHP remote file inclusion vulnerabilities in AEDating 4.1, and possibly earlier versions, allow remote attackers to execute arbitrary PHP code via a URL in the dir[inc] parameter in (1) inc/design.inc.php or (2) inc/admin_design.inc.php.  
Phase
Assigned (20060919)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
198792 20974 CVE-2006-4870 MILW0RM:2377  View
198793 20974 CVE-2006-4870 URL:http://milw0rm.com/exploits/2377  View
198794 20974 CVE-2006-4870 BID:20068  View
198795 20974 CVE-2006-4870 URL:http://www.securityfocus.com/bid/20068  View
198796 20974 CVE-2006-4870 VUPEN:ADV-2006-3659  View
198797 20974 CVE-2006-4870 URL:http://www.vupen.com/english/advisories/2006/3659  View
198798 20974 CVE-2006-4870 OSVDB:28923  View
198799 20974 CVE-2006-4870 URL:http://www.osvdb.org/28923  View
198800 20974 CVE-2006-4870 OSVDB:28924  View
198801 20974 CVE-2006-4870 URL:http://www.osvdb.org/28924  View
198802 20974 CVE-2006-4870 SECUNIA:21955  View
198803 20974 CVE-2006-4870 URL:http://secunia.com/advisories/21955  View
198804 20974 CVE-2006-4870 XF:aedating-design-file-include(28981)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
59857 JVNDB-2006-002123 Keyvan1 ECardPro の search.asp における SQL インジェクションの脆弱性 Keyvan1 ECardPro の search.asp には、SQL インジェクションの脆弱性が存在します。 CVE-2006-4872 20974 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-002123.html  View