CVE

Id
21778  
CVE No.
CVE-2006-5674  
Status
Candidate  
Description
Multiple PHP remote file inclusion vulnerabilities in miniBB 2.0.2 and earlier, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the pathToFiles parameter to (1) bb_func_forums.php, (2) bb_functions.php, or (3) the RSS plugin.  
Phase
Assigned (20061102)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
208669 21778 CVE-2006-5674 CONFIRM:http://www.minibb.net/forums/9_4274_0.html  View
208670 21778 CVE-2006-5674 OSVDB:33963  View
208671 21778 CVE-2006-5674 URL:http://osvdb.org/33963  View
208672 21778 CVE-2006-5674 OSVDB:33964  View
208673 21778 CVE-2006-5674 URL:http://osvdb.org/33964  View
208674 21778 CVE-2006-5674 OSVDB:33965  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
61132 JVNDB-2006-003398 Uni-Vert PhpLeague の consult/classement.php における SQL インジェクションの脆弱性 Uni-Vert PhpLeague の consult/classement.php には、SQL インジェクションの脆弱性が存在します。 CVE-2006-5676 21778 6.4 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003398.html  View