CVE

Id
20994  
CVE No.
CVE-2006-4890  
Status
Candidate  
Description
Multiple PHP remote file inclusion vulnerabilities in UNAK-CMS 1.5 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the dirroot parameter to (1) fckeditor/editor/filemanager/browser/default/connectors/php/connector.php or (2) fckeditor/editor/dialog/fck_link.php.  
Phase
Assigned (20060919)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
199028 20994 CVE-2006-4890 MILW0RM:2380  View
199029 20994 CVE-2006-4890 URL:http://milw0rm.com/exploits/2380  View
199030 20994 CVE-2006-4890 CONFIRM:http://www.unak.net/forum/viewtopic.php?id=165  View
199031 20994 CVE-2006-4890 BID:20070  View
199032 20994 CVE-2006-4890 URL:http://www.securityfocus.com/bid/20070  View
199033 20994 CVE-2006-4890 VUPEN:ADV-2006-3657  View
199034 20994 CVE-2006-4890 URL:http://www.vupen.com/english/advisories/2006/3657  View
199035 20994 CVE-2006-4890 SECUNIA:21957  View
199036 20994 CVE-2006-4890 URL:http://secunia.com/advisories/21957  View
199037 20994 CVE-2006-4890 XF:unakcms-fcklink-file-include(28986)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
60928 JVNDB-2006-003194 Techno Dreams FAQ Manager Package の faqview.asp における SQL インジェクションの脆弱性 Techno Dreams FAQ Manager Package の faqview.asp には、SQL インジェクションの脆弱性が存在します。 CVE-2006-4892 20994 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003194.html  View