CVE

Id
20981  
CVE No.
CVE-2006-4877  
Status
Candidate  
Description
Variable overwrite vulnerability in David Bennett PHP-Post (PHPp) 1.0 and earlier allows remote attackers to overwrite arbitrary program variables via multiple vectors that use the extract function, as demonstrated by the table_prefix parameter in (1) index.php, (2) profile.php, and (3) header.php.  
Phase
Assigned (20060919)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
198851 20981 CVE-2006-4877 BUGTRAQ:20060916 PHP-Post Multiple Input Validation Vulnerabilities  View
198852 20981 CVE-2006-4877 URL:http://www.securityfocus.com/archive/1/archive/1/446318/100/0/threaded  View
198853 20981 CVE-2006-4877 BID:20061  View
198854 20981 CVE-2006-4877 URL:http://www.securityfocus.com/bid/20061  View
198855 20981 CVE-2006-4877 VUPEN:ADV-2006-3688  View
198856 20981 CVE-2006-4877 URL:http://www.vupen.com/english/advisories/2006/3688  View
198857 20981 CVE-2006-4877 OSVDB:28965  View
198858 20981 CVE-2006-4877 URL:http://www.osvdb.org/28965  View
198859 20981 CVE-2006-4877 OSVDB:28966  View
198860 20981 CVE-2006-4877 URL:http://www.osvdb.org/28966  View
198861 20981 CVE-2006-4877 OSVDB:28967  View
198862 20981 CVE-2006-4877 URL:http://www.osvdb.org/28967  View
198863 20981 CVE-2006-4877 SECUNIA:22014  View
198864 20981 CVE-2006-4877 URL:http://secunia.com/advisories/22014  View
198865 20981 CVE-2006-4877 SREASON:1607  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
59013 JVNDB-2006-001279 David Bennett PHPp の profile.php における SQL インジェクションの脆弱性 David Bennett PHP-Post (PHPp) の profile.php には、SQL インジェクションの脆弱性が存在します。 CVE-2006-4879 20981 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-001279.html  View