NVD

Id
59807  
Name
CVE-2006-1085  
Description
admin.php in PHP-Stats 0.1.9.1 and earlier allows remote attackers to bypass authentication, gain administrator privileges, and execute arbitrary PHP code by modifying the option[admin_pass] parameter and setting the pass_cookie to the MD5 hash of the specified password.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2016-12-20  
Published
2006-03-08  
Modified Date
2011-03-07  
Seq
2006-1085  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
307656 59807 CVE-2006-1085 http://retrogod.altervista.org/php_stats_0191_adv.html  View
307657 59807 CVE-2006-1085 http://www.phpstats.net/forum/viewtopic.php?t=140  View
307658 59807 CVE-2006-1085 20060304 PHP-Stats <= 0.1.9.1 remote commands execution  View
307659 59807 CVE-2006-1085 20060322 Re: PHP-Stats <= 0.1.9.1 remote commands execution  View
307660 59807 CVE-2006-1085 20060327 Re: PHP-Stats <= 0.1.9.1 remote commands execution  View
307661 59807 CVE-2006-1085 16963  View
307662 59807 CVE-2006-1085 ADV-2006-0822  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
61474 JVNDB-2006-003740 PHP-Stats の admin.php における認証を回避される脆弱性 PHP-Stats の admin.php には、認証を回避され、管理者権限を取得される、および任意の PHP コードを実行される脆弱性が存在します。 CVE-2006-1085 17187 CVE-2006-1085 59807 10 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003740.html 2006-03-09 2013-12-26 View