NVD

Id
60710  
Name
CVE-2006-2005  
Description
Eval injection vulnerability in index.php in ClanSys 1.1 allows remote attackers to execute arbitrary PHP code via PHP code in the page parameter, as demonstrated by using an "include" statement that is injected into the eval statement. NOTE: this issue has been described as file inclusion by some sources, but that is just one attack; the primary vulnerability is eval injection.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-04-25  
Modified Date
2008-09-05  
Seq
2006-2005  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
313449 60710 CVE-2006-2005 782  View
313450 60710 CVE-2006-2005 1015988  View
313451 60710 CVE-2006-2005 http://www.nukedx.com/?getxpl=29  View
313452 60710 CVE-2006-2005 20060423 Advisory: Clansys <= 1.1 PHP Code Insertion Vulnerability.  View
313453 60710 CVE-2006-2005 17660  View
313454 60710 CVE-2006-2005 clansys-index-file-include(25976)  View

Related JVN