CVE

Id
21008  
CVE No.
CVE-2006-4904  
Status
Candidate  
Description
Dynamic variable evaluation vulnerability in cmpi.php in Qualiteam X-Cart 4.1.3 and earlier allows remote attackers to overwrite arbitrary program variables and execute arbitrary PHP code, as demonstrated by PHP remote file inclusion via the xcart_dir parameter.  
Phase
Assigned (20060920)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
199177 21008 CVE-2006-4904 MISC:http://www.gulftech.org/?node=research&article_id=00113-09182006&  View
199178 21008 CVE-2006-4904 BID:20108  View
199179 21008 CVE-2006-4904 URL:http://www.securityfocus.com/bid/20108  View
199180 21008 CVE-2006-4904 VUPEN:ADV-2006-3692  View
199181 21008 CVE-2006-4904 URL:http://www.vupen.com/english/advisories/2006/3692  View
199182 21008 CVE-2006-4904 SECUNIA:22005  View
199183 21008 CVE-2006-4904 URL:http://secunia.com/advisories/22005  View
199184 21008 CVE-2006-4904 XF:xcart-cmpi-code-execution(29005)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
59868 JVNDB-2006-002134 More.groupware の modules/calendar/week.php における SQL インジェクションの脆弱性 More.groupware の modules/calendar/week.php には、SQL インジェクションの脆弱性が存在します。 CVE-2006-4906 21008 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-002134.html  View