CVE

Id
22645  
CVE No.
CVE-2006-6541  
Status
Candidate  
Description
** DISPUTED ** PHP remote file inclusion vulnerability in signer/final.php in warez distributions of Animated Smiley Generator allows remote attackers to execute arbitrary PHP code via a URL in the smiley parameter. NOTE: the vendor disputes this issue, stating that only Warez versions of Animated Smiley Generator were affected, not the developer-provided software: "Legitimately purchased applications do not allow this exploit."  
Phase
Assigned (20061213)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
219326 22645 CVE-2006-6541 BUGTRAQ:20061208 Animated Smiley Generator File Include Vul.  View
219327 22645 CVE-2006-6541 URL:http://www.securityfocus.com/archive/1/archive/1/453934/100/0/threaded  View
219328 22645 CVE-2006-6541 MISC:http://www.smileygenerator.us/sales/index.php  View
219329 22645 CVE-2006-6541 MISC:http://www.smileygenerator.us/sales/index.php?act=viewProd&productId=8  View
219330 22645 CVE-2006-6541 VIM:20061226 Vendor dispute for Animated Smiley Generator RFI (CVE-2006-6541)  View
219331 22645 CVE-2006-6541 URL:http://www.attrition.org/pipermail/vim/2006-December/001195.html  View
219332 22645 CVE-2006-6541 SREASON:2031  View
219333 22645 CVE-2006-6541 URL:http://securityreason.com/securityalert/2031  View
219334 22645 CVE-2006-6541 XF:animated-final-file-include(30794)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
59479 JVNDB-2006-001745 AppIntellect SpotLight CRM の login.asp における SQL インジェクションの脆弱性 AppIntellect SpotLight CRM の login.asp には、SQL インジェクションの脆弱性が存在します。 CVE-2006-6543 22645 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-001745.html  View