CVE

Id
21998  
CVE No.
CVE-2006-5894  
Status
Candidate  
Description
Directory traversal vulnerability in lang.php in Rama CMS 0.68 and earlier, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lang cookie, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, which is then included by lang.php.  
Phase
Assigned (20061114)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
211789 21998 CVE-2006-5894 MILW0RM:2760  View
211790 21998 CVE-2006-5894 URL:http://milw0rm.com/exploits/2760  View
211791 21998 CVE-2006-5894 MISC:http://www.rahim.webd.pl/exploit127.html  View
211792 21998 CVE-2006-5894 BID:21009  View
211793 21998 CVE-2006-5894 URL:http://www.securityfocus.com/bid/21009  View
211794 21998 CVE-2006-5894 VUPEN:ADV-2006-4473  View
211795 21998 CVE-2006-5894 URL:http://www.vupen.com/english/advisories/2006/4473  View
211796 21998 CVE-2006-5894 SECUNIA:22847  View
211797 21998 CVE-2006-5894 URL:http://secunia.com/advisories/22847  View
211798 21998 CVE-2006-5894 XF:ramacms-lang-file-include(30183)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
61181 JVNDB-2006-003447 REMLAB Web Mech Designer におけるスクリプトのフルパスを取得される脆弱性 REMLAB Web Mech Designer は、エラーメッセージ内にインストールパスをリークする不備があるため、スクリプトのフルパスを取得される脆弱性が存在します。 CVE-2006-5896 21998 5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003447.html  View