CVE

Id
21997  
CVE No.
CVE-2006-5893  
Status
Candidate  
Description
Multiple PHP remote file inclusion vulnerabilities in iWonder Designs Storystream 0.4.0.0 allow remote attackers to execute arbitrary PHP code via a URL in the baseDir parameter to (1) mysql.php and (2) mysqli.php in include/classes/pear/DB/.  
Phase
Assigned (20061114)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
211777 21997 CVE-2006-5893 BUGTRAQ:20061116 Storystream => 4.0 Remote File Include Vulnerability Exploit  View
211778 21997 CVE-2006-5893 URL:http://marc.info/?l=bugtraq&m=116374093504388&w=2  View
211779 21997 CVE-2006-5893 MILW0RM:2767  View
211780 21997 CVE-2006-5893 URL:http://milw0rm.com/exploits/2767  View
211781 21997 CVE-2006-5893 CONFIRM:http://sourceforge.net/project/shownotes.php?release_id=463892&group_id=95217  View
211782 21997 CVE-2006-5893 BID:21012  View
211783 21997 CVE-2006-5893 URL:http://www.securityfocus.com/bid/21012  View
211784 21997 CVE-2006-5893 VUPEN:ADV-2006-4480  View
211785 21997 CVE-2006-5893 URL:http://www.vupen.com/english/advisories/2006/4480  View
211786 21997 CVE-2006-5893 SECTRACK:1017252  View
211787 21997 CVE-2006-5893 URL:http://securitytracker.com/id?1017252  View
211788 21997 CVE-2006-5893 XF:storystream-mysql-file-include(30191)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
59279 JVNDB-2006-001545 EncapsCMS の core/core.php における PHP リモートファイルインクルージョンの脆弱性 EncapsCMS の core/core.php には、PHP リモートファイルインクルージョンの脆弱性が存在します。 CVE-2006-5895 21997 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-001545.html  View