CVE

Id
21880  
CVE No.
CVE-2006-5776  
Status
Candidate  
Description
** DISPUTED ** Multiple PHP remote file inclusions in Ariadne 2.4.1 allows remote attackers to execute arbitrary PHP code via the ariadne parameter in (1) ftp/loader.php and (2) lib/includes/loader.cmd.php. NOTE: this issue is disputed by CVE, since installation instructions recommend that the files be placed outside of the web document root and require the administrator to modify $ariadne in an include file.  
Phase
Assigned (20061106)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
210050 21880 CVE-2006-5776 BUGTRAQ:20061106 Ariadne <= 2.4.1 Multiple Remote File Include Vulnerabilities(New)  View
210051 21880 CVE-2006-5776 URL:http://www.securityfocus.com/archive/1/archive/1/450709/100/0/threaded  View
210052 21880 CVE-2006-5776 VIM:20061106 DISPUTE: PHP file inclusion in Ariadne 2.4.1  View
210053 21880 CVE-2006-5776 URL:http://attrition.org/pipermail/vim/2006-November/001108.html  View
210054 21880 CVE-2006-5776 VIM:20061106 RE: DISPUTE: PHP file inclusion in Ariadne 2.4.1  View
210055 21880 CVE-2006-5776 URL:http://attrition.org/pipermail/vim/2006-November/001109.html  View
210056 21880 CVE-2006-5776 BID:20916  View
210057 21880 CVE-2006-5776 URL:http://www.securityfocus.com/bid/20916  View
210058 21880 CVE-2006-5776 SREASON:1827  View
210059 21880 CVE-2006-5776 URL:http://securityreason.com/securityalert/1827  View
210060 21880 CVE-2006-5776 XF:ariadne-storeconfig-file-include(30018)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
60111 JVNDB-2006-002377 linux-ftpd の ftpd におけるアクセス制限を回避される脆弱性 linux-ftpd の ftpd は、UID を設定する前に chdir を実行するため、アクセス制限を回避される脆弱性が存在します。 CVE-2006-5778 21880 4.6 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-002377.html  View