CVE

Id
22003  
CVE No.
CVE-2006-5899  
Status
Candidate  
Description
** DISPUTED ** PHP remote file inclusion vulnerability in install.php3 in @cid stats 2.3 allows remote attackers to execute arbitrary PHP code via a URL in the repertoire parameter. NOTE: this issue has been disputed by a third party, who states that install.php3 is supposed to be deleted after installation and, if not deleted, intentionally allows setting repertoire without an inclusion attack.  
Phase
Assigned (20061115)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
211840 22003 CVE-2006-5899 BUGTRAQ:20061105 @cid stats v2.3 File Include  View
211841 22003 CVE-2006-5899 URL:http://www.securityfocus.com/archive/1/archive/1/450676/100/0/threaded  View
211842 22003 CVE-2006-5899 BUGTRAQ:20061106 Re: @cid stats v2.3 File Include  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
60143 JVNDB-2006-002409 Hawking Technology の WR254-CA におけるサービス運用妨害 (DoS) の脆弱性 Hawking Technology のワイヤレスルータ WR254-CA は、DNS サーバ IP アドレスセットの中でハードコードされた IP アドレスを使用するため、サービス運用妨害 (DoS) 状態となる、またはルータをハイジャックされる脆弱性が存在します。 CVE-2006-5901 22003 5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-002409.html  View