CVE

Id
23285  
CVE No.
CVE-2006-7181  
Status
Candidate  
Description
** DISPUTED ** Multiple PHP remote file inclusion vulnerabilities in Morcego CMS 0.9.6 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the (1) fichero parameter to morcegoCMS.php or the (2) path parameter to adodb/adodb.inc.php. NOTE: vector 1 has been disputed by a third party who shows that $fichero can not be controlled by an attacker.  
Phase
Assigned (20070329)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
224144 23285 CVE-2006-7181 BUGTRAQ:20061012 Morcego CMS <= 0.9.6 Remote File Inclue Vulnerability  View
224145 23285 CVE-2006-7181 URL:http://www.securityfocus.com/archive/1/archive/1/448545/100/0/threaded  View
224146 23285 CVE-2006-7181 BUGTRAQ:20071220 Re: Morcego CMS <= 0.9.6 Remote File Inclue Vulnerability  View
224147 23285 CVE-2006-7181 URL:http://www.securityfocus.com/archive/1/archive/1/485403/100/0/threaded  View
224148 23285 CVE-2006-7181 SREASON:2494  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
54463 JVNDB-2007-003155 EE の styles.php における PHP リモートファイルインクルージョンの脆弱性 Exhibit Engine (EE) の styles.php には、PHP リモートファイルインクルージョンの脆弱性が存在します。 CVE-2006-7183 23285 10 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-003155.html  View