CVE

Id
22010  
CVE No.
CVE-2006-5906  
Status
Candidate  
Description
** DISPUTED ** PHP remote file inclusion vulnerability in modules/bannieres/bannieres.php in Jean-Christophe Ramos SCRIPT BANNIERES (aka ban 0.1 and PLS-Bannieres 1.21) allows remote attackers to execute arbitrary PHP code via a URL in the chemin parameter. NOTE: the issue is disputed by other researchers, who observe that $chemin is defined before use.  
Phase
Assigned (20061115)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
211864 22010 CVE-2006-5906 BUGTRAQ:20061027 Ban v0.1 (bannieres.php) File Include  View
211865 22010 CVE-2006-5906 URL:http://www.securityfocus.com/archive/1/archive/1/449910/100/200/threaded  View
211866 22010 CVE-2006-5906 BUGTRAQ:20061027 PLS-Bannieres 1.21 (bannieres.php) File Include  View
211867 22010 CVE-2006-5906 URL:http://www.securityfocus.com/archive/1/archive/1/449927/100/200/threaded  View
211868 22010 CVE-2006-5906 BUGTRAQ:20061028 Re: Ban v0.1 (bannieres.php) File Include  View
211869 22010 CVE-2006-5906 URL:http://www.securityfocus.com/archive/1/archive/1/449955/100/200/threaded  View
211870 22010 CVE-2006-5906 BUGTRAQ:20061101 Re: PLS-Bannieres 1.21 (bannieres.php) File Include  View
211871 22010 CVE-2006-5906 URL:http://www.securityfocus.com/archive/1/archive/1/450297/100/200/threaded  View
211872 22010 CVE-2006-5906 BID:20772  View
211873 22010 CVE-2006-5906 URL:http://www.securityfocus.com/bid/20772  View
211874 22010 CVE-2006-5906 XF:plsbannieres-bannieres-file-include(29856)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
60146 JVNDB-2006-002412 Lucas Rodriguez San Pedro YANS の yans.func.php における SQL インジェクションの脆弱性 Lucas Rodriguez San Pedro Yet Another News System (YANS) の yans.func.php の login_user 関数には、SQL インジェクションの脆弱性が存在します。 CVE-2006-5908 22010 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-002412.html  View