NVD

Id
59217  
Name
CVE-2006-0479  
Description
pmwiki.php in PmWiki 2.1 beta 20, with register_globals enabled, allows remote attackers to bypass protection mechanisms that deregister global variables by setting both a GPC variable and a GLOBALS[] variable with the same name, which causes PmWiki to unset the GLOBALS[] variable but not the GPC variable, which creates resultant vulnerabilities such as remote file inclusion and cross-site scripting (XSS).  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2016-12-20  
Published
2006-01-31  
Modified Date
2011-03-07  
Seq
2006-0479  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
304408 59217 CVE-2006-0479 20060128 PmWiki Multiple Vulnerabilities  View
304409 59217 CVE-2006-0479 1015550  View
304410 59217 CVE-2006-0479 16421  View
304411 59217 CVE-2006-0479 http://www.ush.it/2006/01/24/pmwiki-multiple-vulnerabilities/  View
304412 59217 CVE-2006-0479 ADV-2006-0375  View
304413 59217 CVE-2006-0479 pmwiki-path-disclosure(24366)  View
304414 59217 CVE-2006-0479 pmwiki-file-include(24367)  View
304415 59217 CVE-2006-0479 pmwiki-multiple-xss(24368)  View

Related JVN