CVE

Id
21201  
CVE No.
CVE-2006-5097  
Status
Candidate  
Description
** DISPUTED ** PHP remote file inclusion vulnerability in index.php in net2ftp, possibly 0.1 through 0.62, allows remote attackers to execute arbitrary PHP code via a URL in the application_rootdir parameter. NOTE: this issue has been disputed by a third party researcher, CVE, and the vendor. The vendor says "the variable is set in settings.inc.php, so this is not a vulnerability."  
Phase
Assigned (20060929)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
201430 21201 CVE-2006-5097 BUGTRAQ:20060926 net2ftp: a web based FTP client :) <= Remote File Inclusion  View
201431 21201 CVE-2006-5097 URL:http://www.securityfocus.com/archive/1/archive/1/447156/100/0/threaded  View
201432 21201 CVE-2006-5097 BUGTRAQ:20061002 Re: net2ftp: a web based FTP client :) <= Remote File Inclusion  View
201433 21201 CVE-2006-5097 URL:http://www.securityfocus.com/archive/1/archive/1/447535/100/0/threaded  View
201434 21201 CVE-2006-5097 BUGTRAQ:20061006 Re: net2ftp Remote File Inclusion - bogus report  View
201435 21201 CVE-2006-5097 URL:http://www.securityfocus.com/archive/1/archive/1/447916/100/0/threaded  View
201436 21201 CVE-2006-5097 BUGTRAQ:20061009 Re: net2ftp: a web based FTP client :) <= Remote File Inclusion  View
201437 21201 CVE-2006-5097 URL:http://www.securityfocus.com/archive/1/archive/1/448037/100/0/threaded  View
201438 21201 CVE-2006-5097 MISC:http://www.net2ftp.org/forums/viewtopic.php?pid=6687  View
201439 21201 CVE-2006-5097 VIM:20061009 net2ftp: a web based FTP client :) <= Remote File Inclusion (fwd)  View
201440 21201 CVE-2006-5097 URL:http://www.attrition.org/pipermail/vim/2006-October/001076.html  View
201441 21201 CVE-2006-5097 VIM:20061009 net2ftp: a web based FTP client :) <= Remote File Inclusion (fwd)  View
201442 21201 CVE-2006-5097 URL:http://www.attrition.org/pipermail/vim/2006-October/001077.html  View
201443 21201 CVE-2006-5097 MISC:http://www.net2ftp.org/forums/viewtopic.php?pid=6676  View
201444 21201 CVE-2006-5097 MISC:http://www.net2ftp.org/forums/viewtopic.php?pid=6689  View
201445 21201 CVE-2006-5097 SREASON:1655  View
201446 21201 CVE-2006-5097 URL:http://securityreason.com/securityalert/1655  View
201447 21201 CVE-2006-5097 XF:net2ftp-index-file-include(29203)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
59069 JVNDB-2006-001335 DokuWiki の lib/exec/fetch.php における任意のコマンドを実行される脆弱性 DokuWiki の lib/exec/fetch.php は、conf[imconvert] で ImageMagick の使用を設定する際、変換の呼び出しをする場面でフィルタしないため、任意のコマンドを実行される脆弱性が存在します。 CVE-2006-5099 21201 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-001335.html  View