CVE

Id
21484  
CVE No.
CVE-2006-5380  
Status
Candidate  
Description
** DISPUTED ** Remote file inclusion vulnerability in Contenido CMS allows remote attackers to execute arbitrary PHP code via a URL in the contenido_path parameter to (1) cms/dbfs.php or (2) cms/front_content.php. NOTE: CVE disputes this issue for version 4.6.15, because $contenido_path is set to a static value.  
Phase
Assigned (20061017)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
205010 21484 CVE-2006-5380 BUGTRAQ:20061013 CMS contenido Remote File Inclusion  View
205011 21484 CVE-2006-5380 URL:http://www.securityfocus.com/archive/1/archive/1/448549/100/0/threaded  View
205012 21484 CVE-2006-5380 VIM:20061017 Contenido RFI - CVE dispute  View
205013 21484 CVE-2006-5380 URL:http://www.attrition.org/pipermail/vim/2006-October/001084.html  View
205014 21484 CVE-2006-5380 SREASON:1739  View
205015 21484 CVE-2006-5380 URL:http://securityreason.com/securityalert/1739  View
205016 21484 CVE-2006-5380 XF:contenido-contenido-file-include(29549)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
59131 JVNDB-2006-001397 3Com Switch SS3 4400 における不正なアクションを実行される脆弱性 3Com Switch SS3 4400 には、SNMP Read-Write Community の文字列を読まれ、不正なアクションを実行される脆弱性が存在します。 CVE-2006-5382 21484 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-001397.html  View