CVE

Id
21738  
CVE No.
CVE-2006-5634  
Status
Candidate  
Description
Multiple PHP remote file inclusion vulnerabilities in phpProfiles 2.1 Beta allow remote attackers to execute arbitrary PHP code via a URL in the (1) reqpath parameter to (a) body.inc.php and (b) body_blog.inc.php in users/include/; or the (2) usrinc parameter in users/include/upload_ht.inc.php.  
Phase
Assigned (20061031)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
208282 21738 CVE-2006-5634 MILW0RM:2688  View
208283 21738 CVE-2006-5634 URL:http://milw0rm.com/exploits/2688  View
208284 21738 CVE-2006-5634 BID:20819  View
208285 21738 CVE-2006-5634 URL:http://www.securityfocus.com/bid/20819  View
208286 21738 CVE-2006-5634 VUPEN:ADV-2006-4274  View
208287 21738 CVE-2006-5634 URL:http://www.vupen.com/english/advisories/2006/4274  View
208288 21738 CVE-2006-5634 OSVDB:30136  View
208289 21738 CVE-2006-5634 URL:http://www.osvdb.org/displayvuln.php?osvdb_id=30136  View
208290 21738 CVE-2006-5634 OSVDB:30138  View
208291 21738 CVE-2006-5634 URL:http://www.osvdb.org/30138  View
208292 21738 CVE-2006-5634 OSVDB:30137  View
208293 21738 CVE-2006-5634 URL:http://www.osvdb.org/30137  View
208294 21738 CVE-2006-5634 SECUNIA:22644  View
208295 21738 CVE-2006-5634 URL:http://secunia.com/advisories/22644  View
208296 21738 CVE-2006-5634 XF:phpprofiles-reqpath-file-include(29900)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
61116 JVNDB-2006-003382 SWS の common.php における PHP リモートファイルインクルージョンの脆弱性 Simple Website Software (SWS) の common.php には、PHP リモートファイルインクルージョンの脆弱性が存在します。 CVE-2006-5636 21738 5.1 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003382.html  View