CVE

Id
21517  
CVE No.
CVE-2006-5413  
Status
Candidate  
Description
Multiple PHP remote file inclusion vulnerabilities in SuperMod 3.0.0 for YABB (YaBBSM) allow remote attackers to execute arbitrary PHP code via a URL in the sourcedir parameter to (1) Offline.php, (2) Sources/Admin.php, (3) Sources/Offline.php, or (4) content/portalshow.php.  
Phase
Assigned (20061019)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
205330 21517 CVE-2006-5413 MILW0RM:2553  View
205331 21517 CVE-2006-5413 URL:http://milw0rm.com/exploits/2553  View
205332 21517 CVE-2006-5413 BID:20568  View
205333 21517 CVE-2006-5413 URL:http://www.securityfocus.com/bid/20568  View
205334 21517 CVE-2006-5413 BID:20570  View
205335 21517 CVE-2006-5413 URL:http://www.securityfocus.com/bid/20570  View
205336 21517 CVE-2006-5413 VUPEN:ADV-2006-4042  View
205337 21517 CVE-2006-5413 URL:http://www.vupen.com/english/advisories/2006/4042  View
205338 21517 CVE-2006-5413 SECUNIA:22437  View
205339 21517 CVE-2006-5413 URL:http://secunia.com/advisories/22437  View
205340 21517 CVE-2006-5413 XF:yabbsm-sourcedir-file-include(29559)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
60025 JVNDB-2006-002291 News phpBB 用の Defilante Horizontale モジュールにおける PHP リモートファイルインクルージョンの脆弱性 News phpBB 用の Defilante Horizontale モジュールの includes/functions_newshr.php には、PHP リモートファイルインクルージョンの脆弱性が存在します。 CVE-2006-5415 21517 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-002291.html  View