NVD

Id
60764  
Name
CVE-2006-2059  
Description
action_public/search.php in Invision Power Board (IPB) 2.1.x and 2.0.x before 20060425 allows remote attackers to execute arbitrary PHP code via a search with a crafted value of the lastdate parameter, which alters the behavior of a regular expression to add a "#e" (execute) modifier.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:P/A:N)  
Pub Date
2016-12-20  
Published
2006-04-26  
Modified Date
2011-03-07  
Seq
2006-2059  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
313740 60764 CVE-2006-2059 http://forums.invisionpower.com/index.php?showtopic=213374  View
313741 60764 CVE-2006-2059 796  View
313742 60764 CVE-2006-2059 20060425 Invision Vulnerabilities, including remote code execution  View
313743 60764 CVE-2006-2059 20060427 Re: Invision Vulnerabilities, including remote code execution  View
313744 60764 CVE-2006-2059 20060427 Invision Power Board 2.1.5 POC  View
313745 60764 CVE-2006-2059 20060710 Re: RE: Invision Vulnerabilities, including remote code execution  View
313746 60764 CVE-2006-2059 17695  View
313747 60764 CVE-2006-2059 ADV-2006-1534  View
313748 60764 CVE-2006-2059 invision-search-file-include(26070)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
61511 JVNDB-2006-003777 Invision Power Board の action_public/search.php における任意の PHP コードを実行される脆弱性 Invision Power Board (IPB) の action_public/search.php には、任意の PHP コードを実行される脆弱性が存在します。 CVE-2006-2059 18161 CVE-2006-2059 60764 5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003777.html 2006-04-26 2013-12-26 View