CVE

Id
21506  
CVE No.
CVE-2006-5402  
Status
Candidate  
Description
Multiple PHP remote file inclusion vulnerabilities in PHPmybibli 3.0.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the (1) class_path, (2) javascript_path, and (3) include_path parameters in (a) cart.php; the (4) class_path parameter in (b) index.php; the (5) javascript_path parameter in (c) edit.php; the (6) include_path parameter in (d) circ.php; unspecified parameters in (e) select.php; and unspecified parameters in other files.  
Phase
Assigned (20061018)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
205209 21506 CVE-2006-5402 BUGTRAQ:20061017 [ECHO_ADV_55$2006]Phpmybibli <=2.1 Multiple Remote File Inclusion Vulnerability  View
205210 21506 CVE-2006-5402 URL:http://marc.info/?l=bugtraq&m=116110988829381&w=2  View
205211 21506 CVE-2006-5402 VIM:20061018 CVE-2006-5402, fishy?  View
205212 21506 CVE-2006-5402 URL:http://attrition.org/pipermail/vim/2006-October/001087.html  View
205213 21506 CVE-2006-5402 VIM:20061019 CVE-2006-5402, fishy?  View
205214 21506 CVE-2006-5402 URL:http://attrition.org/pipermail/vim/2006-October/001088.html  View
205215 21506 CVE-2006-5402 MISC:http://advisories.echo.or.id/adv/adv55-theday-2006.txt  View
205216 21506 CVE-2006-5402 CONFIRM:http://www.sigb.net/patch.php  View
205217 21506 CVE-2006-5402 BID:20578  View
205218 21506 CVE-2006-5402 URL:http://www.securityfocus.com/bid/20578  View
205219 21506 CVE-2006-5402 VUPEN:ADV-2006-4064  View
205220 21506 CVE-2006-5402 URL:http://www.vupen.com/english/advisories/2006/4064  View
205221 21506 CVE-2006-5402 XF:phpmybibli-includepath-file-include(29627)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
61053 JVNDB-2006-003319 Norton AntiVirus などの Symantec Automated Support Assistant で使用される ActiveX コントロールにおける重要な情報を取得される脆弱性 Norton AntiVirus、Internet Security、および System Works の Symantec Automated Support Assistant で使用される ActiveX コントロールには、重要な情報を取得される脆弱性が存在します。 CVE-2006-5404 21506 2.6 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003319.html  View