CVE

Id
21240  
CVE No.
CVE-2006-5136  
Status
Candidate  
Description
Multiple PHP remote file inclusion vulnerabilities in ubbt.inc.php in Groupee UBB.threads 6.5.1.1 allow remote attackers to execute arbitrary PHP code via a URL in the (1) GLOBALS[thispath] or (2) GLOBALS[configdir] parameter.  
Phase
Assigned (20061002)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
201915 21240 CVE-2006-5136 BUGTRAQ:20060929 UBB.threads Multiple input validation error  View
201916 21240 CVE-2006-5136 URL:http://www.securityfocus.com/archive/1/archive/1/447359/100/0/threaded  View
201917 21240 CVE-2006-5136 BID:20266  View
201918 21240 CVE-2006-5136 URL:http://www.securityfocus.com/bid/20266  View
201919 21240 CVE-2006-5136 SREASON:1676  View
201920 21240 CVE-2006-5136 URL:http://securityreason.com/securityalert/1676  View
201921 21240 CVE-2006-5136 XF:ubbthreads-multiple-file-include(29274)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
60992 JVNDB-2006-003258 Groupee UBB.threads における重要な情報を取得される脆弱性 Groupee UBB.threads は、エラーメッセージにパスを表示する不備があるため、重要な情報を取得される脆弱性が存在します。 CVE-2006-5138 21240 5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003258.html  View