NVD

Id
58887  
Name
CVE-2006-0147  
Description
Dynamic code evaluation vulnerability in tests/tmssql.php test script in ADOdb for PHP before 4.70, as used in multiple products including (1) Mantis, (2) PostNuke, (3) Moodle, (4) Cacti, (5) Xaraya, (6) PhpOpenChat, possibly (7) MAXdev MD-Pro, and (8) Simplog, allows remote attackers to execute arbitrary PHP functions via the do parameter, which is saved in a variable that is then executed as a function, as demonstrated using phpinfo.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-01-09  
Modified Date
2013-08-30  
Seq
2006-0147  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
302375 58887 CVE-2006-0147 1663  View
302376 58887 CVE-2006-0147 http://retrogod.altervista.org/phpopenchat_30x_sql_xpl.html  View
302377 58887 CVE-2006-0147 http://retrogod.altervista.org/simplog_092_incl_xpl.html  View
302378 58887 CVE-2006-0147 DSA-1029  View
302379 58887 CVE-2006-0147 DSA-1030  View
302380 58887 CVE-2006-0147 DSA-1031  View
302381 58887 CVE-2006-0147 GLSA-200604-07  View
302382 58887 CVE-2006-0147 20060409 PhpOpenChat 3.0.x ADODB Server.php "sql" SQL injection  View
302383 58887 CVE-2006-0147 20060412 Simplog <=0.9.2 multiple vulnerabilities  View
302384 58887 CVE-2006-0147 ADV-2006-0101  View
302385 58887 CVE-2006-0147 ADV-2006-0102  View
302386 58887 CVE-2006-0147 ADV-2006-0103  View
302387 58887 CVE-2006-0147 ADV-2006-0104  View
302388 58887 CVE-2006-0147 ADV-2006-1305  View
302389 58887 CVE-2006-0147 ADV-2006-1332  View
302390 58887 CVE-2006-0147 adodb-tmssql-command-execution(24052)  View

Related JVN