CVE

Id
22389  
CVE No.
CVE-2006-6285  
Status
Candidate  
Description
** DISPUTED ** PHP remote file inclusion vulnerability in index.php in Kai Blankenhorn Bitfolge simple and nice index file (aka snif) 1.5.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the externalConfig parameter. NOTE: CVE and other third parties dispute this vulnerability because $externalConfig is defined before use.  
Phase
Assigned (20061204)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
216387 22389 CVE-2006-6285 MILW0RM:2868  View
216388 22389 CVE-2006-6285 URL:http://milw0rm.com/exploits/2868  View
216389 22389 CVE-2006-6285 VIM:20061204 snif RFI curiosity  View
216390 22389 CVE-2006-6285 URL:http://attrition.org/pipermail/vim/2006-December/001159.html  View
216391 22389 CVE-2006-6285 VIM:20061204 snif RFI curiosity  View
216392 22389 CVE-2006-6285 URL:http://www.attrition.org/pipermail/vim/2006-December/001161.html  View
216393 22389 CVE-2006-6285 BID:21378  View
216394 22389 CVE-2006-6285 URL:http://www.securityfocus.com/bid/21378  View
216395 22389 CVE-2006-6285 XF:snif-index-file-include(30613)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
59420 JVNDB-2006-001686 AtomixMP3 におけるスタックベースのバッファオーバーフローの脆弱性 AtomixMP3 には、スタックベースのバッファオーバーフローの脆弱性が存在します。 CVE-2006-6287 22389 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-001686.html  View