CVE

Id
21564  
CVE No.
CVE-2006-5460  
Status
Candidate  
Description
** DISPUTED ** Multiple PHP remote file inclusion vulnerabilities in Hinton Design phpht Topsites allow remote attackers to execute arbitrary PHP code via a URL in the phpht_real_path parameter to (1) index.php, (2) certain other scripts in the top-level directory, and (3) certain scripts in the admin/ directory. NOTE: CVE disputes this vulnerability because $phpht_real_path is defined before use in index.php and most other files except common.php, which is already covered by CVE-2006-5458.  
Phase
Assigned (20061023)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
205893 21564 CVE-2006-5460 BUGTRAQ:20061012 PHPht Topsites Remote File İnclude  View
205894 21564 CVE-2006-5460 URL:http://www.securityfocus.com/archive/1/archive/1/448610/100/100/threaed  View
205895 21564 CVE-2006-5460 SREASON:1759  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
58565 JVNDB-2006-000761 Mozilla Network Security Services (NSS) における RSA 署名を偽装可能な脆弱性 Mozilla 製品に含まれる暗号ライブラリ Network Security Service (NSS) には、署名の付加データの処理が不適切であるため、公開指数に 3 である RSA 署名が偽装可能な脆弱性が存在します。 CVE-2006-5462 21564 6.4 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000761.html  View