CVE

Id
21525  
CVE No.
CVE-2006-5421  
Status
Candidate  
Description
WSN Forum 1.3.4 and earlier allows remote attackers to execute arbitrary PHP code via a modified pathname in the pathtoconfig parameter that points to an avatar image that contains PHP code, which is then accessed from prestart.php. NOTE: this issue has been labeled remote file inclusion, but that label only applies to the attack, not the underlying vulnerability.  
Phase
Assigned (20061019)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
205416 21525 CVE-2006-5421 MILW0RM:2583  View
205417 21525 CVE-2006-5421 URL:http://milw0rm.com/exploits/2583  View
205418 21525 CVE-2006-5421 BID:20586  View
205419 21525 CVE-2006-5421 URL:http://www.securityfocus.com/bid/20586  View
205420 21525 CVE-2006-5421 VUPEN:ADV-2006-4081  View
205421 21525 CVE-2006-5421 URL:http://www.vupen.com/english/advisories/2006/4081  View
205422 21525 CVE-2006-5421 SECUNIA:22360  View
205423 21525 CVE-2006-5421 URL:http://secunia.com/advisories/22360  View
205424 21525 CVE-2006-5421 XF:wsnforum-prestart-file-upload(29635)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
60029 JVNDB-2006-002295 Lou Portail の admin/admin_module.php における PHP リモートファイルインクルージョンの脆弱性 Lou Portail の admin/admin_module.php には、PHP リモートファイルインクルージョンの脆弱性が存在します。 CVE-2006-5423 21525 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-002295.html  View