CVE

Id
22523  
CVE No.
CVE-2006-6419  
Status
Candidate  
Description
jce.php in the JCE Admin Component in Ryan Demmer Joomla Content Editor (JCE) 1.1.0 beta 2 and earlier for Joomla! (com_jce) allows remote attackers to include and possibly execute arbitrary local files via the (1) plugin or (2) file parameter. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.  
Phase
Assigned (20061209)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
217519 22523 CVE-2006-6419 BID:21491  View
217520 22523 CVE-2006-6419 URL:http://www.securityfocus.com/bid/21491  View
217521 22523 CVE-2006-6419 VUPEN:ADV-2006-4903  View
217522 22523 CVE-2006-6419 URL:http://www.vupen.com/english/advisories/2006/4903  View
217523 22523 CVE-2006-6419 SECUNIA:23160  View
217524 22523 CVE-2006-6419 URL:http://secunia.com/advisories/23160  View
217525 22523 CVE-2006-6419 XF:jceadmin-jce-file-include(30798)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
61307 JVNDB-2006-003573 phpBB のプライベートメッセージボックス実装 (privmsg.php) におけるクロスサイトスクリプティングの脆弱性 phpBB のプライベートメッセージボックス実装 (privmsg.php) には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2006-6421 22523 6 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003573.html  View