NVD

Id
60524  
Name
CVE-2006-1819  
Description
Directory traversal vulnerability in the loadConfig function in index.php in phpWebSite 0.10.2 and earlier allows remote attackers to include arbitrary local files and execute arbitrary PHP code via the hub_dir parameter, as demonstrated by including access_log. NOTE: in some cases, arbitrary remote file inclusion could be performed under PHP 5 using an SMB share argument such as "\systemnamesharename".  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-04-18  
Modified Date
2011-03-07  
Seq
2006-1819  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
312207 60524 CVE-2006-1819 http://downloads.securityfocus.com/vulnerabilities/exploits/PHPWebSite_fi_poc  View
312208 60524 CVE-2006-1819 1673  View
312209 60524 CVE-2006-1819 1015942  View
312210 60524 CVE-2006-1819 GLSA-200605-04  View
312211 60524 CVE-2006-1819 17521  View
312212 60524 CVE-2006-1819 ADV-2006-1361  View
312213 60524 CVE-2006-1819 phpwebsite-index-hubdir-file-include(25867)  View

Related JVN