CVE

Id
22122  
CVE No.
CVE-2006-6018  
Status
Candidate  
Description
** DISPUTED ** PHP remote file inclusion vulnerability in mybic_server.php in Jim Plush My-BIC 0.6.5 allows remote attackers to execute arbitrary PHP code via a URL in the INC_PATH parameter, a different vector than CVE-2006-5089. NOTE: this issue is disputed by CVE and third party researchers because INC_PATH is a constant.  
Phase
Assigned (20061121)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
212899 22122 CVE-2006-6018 BUGTRAQ:20061116 My-BIC => 0.6.5 Remote File Include Vulnerability Exploit  View
212900 22122 CVE-2006-6018 URL:http://www.securityfocus.com/archive/1/archive/1/451876/100/0/threaded  View
212901 22122 CVE-2006-6018 VIM:20061117 Fwd: My-BIC => 0.6.5 Remote File Include Vulnerability Exploit  View
212902 22122 CVE-2006-6018 URL:http://attrition.org/pipermail/vim/2006-November/001127.html  View
212903 22122 CVE-2006-6018 OSVDB:31542  View
212904 22122 CVE-2006-6018 URL:http://osvdb.org/31542  View
212905 22122 CVE-2006-6018 SREASON:1891  View
212906 22122 CVE-2006-6018 URL:http://securityreason.com/securityalert/1891  View
212907 22122 CVE-2006-6018 XF:mybic-mybic-file-include(30361)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
59316 JVNDB-2006-001582 Blog Torrent Preview の announce.php におけるクロスサイトスクリプティングの脆弱性 Blog Torrent Preview の announce.php には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2006-6020 22122 6.8 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-001582.html  View