NVD

Id
60699  
Name
CVE-2006-1994  
Description
PHP remote file inclusion vulnerability in dForum 1.5 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the DFORUM_PATH parameter to (1) about.php, (2) admin.php, (3) anmelden.php, (4) losethread.php, (5) config.php, (6) delpost.php, (7) delthread.php, (8) dfcode.php, (9) download.php, (10) editanoc.php, (11) forum.php, (12) login.php, (13) makethread.php, (14) menu.php, (15) newthread.php, (16) openthread.php, (17) overview.php, (18) post.php, (19) suchen.php, (20) user.php, (21) userconfig.php, (22) userinfo.php, and (23) verwalten.php.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-04-25  
Modified Date
2011-03-07  
Seq
2006-1994  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
313392 60699 CVE-2006-1994 20060421 dForum <= 1.5 Multiple Remote File Inclusion Vulnerabilities.  View
313393 60699 CVE-2006-1994 http://www.nukedx.com/?viewdoc=27  View
313394 60699 CVE-2006-1994 20060421 dForum <= 1.5 Multiple Remote File Inclusion Vulnerabilities.  View
313395 60699 CVE-2006-1994 17650  View
313396 60699 CVE-2006-1994 ADV-2006-1482  View
313397 60699 CVE-2006-1994 dforum-dforumpath-parameter-file-include(26035)  View

Related JVN