CVE

Id
22271  
CVE No.
CVE-2006-6167  
Status
Candidate  
Description
** DISPUTED ** Multiple PHP remote file inclusion vulnerabilities in L. Brandon Stone and Nathanial P. Hendler Active PHP Bookmarks (APB) 1.1.02 allow remote attackers to execute arbitrary PHP code via a URL in the APB_SETTINGS["apb_path"] parameter in (1) apb_common.php or (2) apb.php. NOTE: CVE and another third party dispute this vulnerability because these PHP scripts exit if the attack vectors are present in GPC variables.  
Phase
Assigned (20061128)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
215163 22271 CVE-2006-6167 BUGTRAQ:20061123 Active PHP Bookmarks (apb.php) Remote file include  View
215164 22271 CVE-2006-6167 URL:http://www.securityfocus.com/archive/1/archive/1/452490/100/0/threaded  View
215165 22271 CVE-2006-6167 BUGTRAQ:20061124 Re: Active PHP Bookmarks (apb.php) Remote file include  View
215166 22271 CVE-2006-6167 URL:http://www.securityfocus.com/archive/1/archive/1/452559/100/0/threaded  View
215167 22271 CVE-2006-6167 BID:23670  View
215168 22271 CVE-2006-6167 URL:http://www.securityfocus.com/bid/23670  View
215169 22271 CVE-2006-6167 BID:21263  View
215170 22271 CVE-2006-6167 URL:http://www.securityfocus.com/bid/21263  View
215171 22271 CVE-2006-6167 OSVDB:31956  View
215172 22271 CVE-2006-6167 URL:http://www.osvdb.org/31956  View
215173 22271 CVE-2006-6167 XF:apb-apbpath-file-include(30518)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
58603 JVNDB-2006-000799 GnuPG の ask_outfile_name() 関数におけるヒープオーバーフローの脆弱性 GnuPG の openfile.c 内の ask_outfile_name() 関数には、make_printable_string() 関数において変換前の文字列長である NAMELEN よりも長い文字列が返された場合にヒープオーバーフローが発生する脆弱性が存在します。 CVE-2006-6169 22271 6.8 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000799.html  View