CVE

Id
20997  
CVE No.
CVE-2006-4893  
Status
Candidate  
Description
PHP remote file inclusion vulnerability in bb_usage_stats/includes/bb_usage_stats.php in phpBB XS 0.58 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter, a different vector than CVE-2006-4780.  
Phase
Assigned (20060919)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
199064 20997 CVE-2006-4893 BUGTRAQ:20060915 SolpotCrew Advisory #10 - phpBB XS (phpbb_root_path) Remote File Include  View
199065 20997 CVE-2006-4893 URL:http://www.securityfocus.com/archive/1/archive/1/446108/100/0/threaded  View
199066 20997 CVE-2006-4893 BUGTRAQ:20061123 Re: SolpotCrew Advisory #10 - phpBB XS (phpbb_root_path) Remote File Include  View
199067 20997 CVE-2006-4893 URL:http://www.securityfocus.com/archive/1/archive/1/452469/100/200/threaded  View
199068 20997 CVE-2006-4893 MISC:http://nyubicrew.org/adv/Noge_adv_02.txt  View
199069 20997 CVE-2006-4893 BID:20046  View
199070 20997 CVE-2006-4893 URL:http://www.securityfocus.com/bid/20046  View
199071 20997 CVE-2006-4893 VUPEN:ADV-2006-3654  View
199072 20997 CVE-2006-4893 URL:http://www.vupen.com/english/advisories/2006/3654  View
199073 20997 CVE-2006-4893 OSVDB:28918  View
199074 20997 CVE-2006-4893 URL:http://www.osvdb.org/28918  View
199075 20997 CVE-2006-4893 SECUNIA:21970  View
199076 20997 CVE-2006-4893 URL:http://secunia.com/advisories/21970  View
199077 20997 CVE-2006-4893 SREASON:1617  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
59867 JVNDB-2006-002133 IDevSpot NexieAffiliate における任意のアフィリエイトを削除される脆弱性 IDevSpot NexieAffiliate には、任意のアフィリエイトを削除される脆弱性が存在します。 CVE-2006-4895 20997 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-002133.html  View