CVE

Id
21503  
CVE No.
CVE-2006-5399  
Status
Candidate  
Description
PHP remote file inclusion vulnerability in classes/Import_MM.class.php in PHPRecipeBook 2.36, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the g_rb_basedir parameter.  
Phase
Assigned (20061018)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
205184 21503 CVE-2006-5399 BUGTRAQ:20061018 PHPRecipeBook <= 2.35 ((g_rb_basedir)) Remote File Include Exploit  View
205185 21503 CVE-2006-5399 URL:http://www.securityfocus.com/archive/1/archive/1/449116/100/0/threaded  View
205186 21503 CVE-2006-5399 BUGTRAQ:20061018 Re: PHPRecipeBook <= 2.35 ((g_rb_basedir)) Remote File Include Exploit  View
205187 21503 CVE-2006-5399 URL:http://www.securityfocus.com/archive/1/archive/1/449130/100/0/threaded  View
205188 21503 CVE-2006-5399 BUGTRAQ:20061019 Re: PHPRecipeBook <= 2.35 ((g_rb_basedir)) Remote File Include Exploit  View
205189 21503 CVE-2006-5399 URL:http://www.securityfocus.com/archive/1/archive/1/449236/100/0/threaded  View
205190 21503 CVE-2006-5399 MILW0RM:2584  View
205191 21503 CVE-2006-5399 URL:http://milw0rm.com/exploits/2584  View
205192 21503 CVE-2006-5399 BID:20575  View
205193 21503 CVE-2006-5399 URL:http://www.securityfocus.com/bid/20575  View
205194 21503 CVE-2006-5399 VUPEN:ADV-2006-4051  View
205195 21503 CVE-2006-5399 URL:http://www.vupen.com/english/advisories/2006/4051  View
205196 21503 CVE-2006-5399 SECUNIA:22427  View
205197 21503 CVE-2006-5399 URL:http://secunia.com/advisories/22427  View
205198 21503 CVE-2006-5399 XF:phprecipebook-import-file-include(29611)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
59137 JVNDB-2006-001403 AROUNDMe の template/barnraiser_01/p_new_password.tpl.php における PHP リモートファイルインクルージョンの脆弱性 AROUNDMe の template/barnraiser_01/p_new_password.tpl.php には、PHP リモートファイルインクルージョンの脆弱性が存在します。 CVE-2006-5401 21503 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-001403.html  View