NVD

Id
61017  
Name
CVE-2006-2315  
Description
** DISPUTED ** PHP remote file inclusion vulnerability in session.inc.php in ISPConfig 2.2.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the go_info[server][classes_root] parameter. NOTE: the vendor has disputed this vulnerability, saying that session.inc.php is not under the web root in version 2.2, and register_globals is not enabled.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-05-11  
Modified Date
2011-08-10  
Seq
2006-2315  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
315143 61017 CVE-2006-2315 20060507 [XPA] - ISPConfig <= 2.2.2 - Remote Command Execution Vulnerability  View
315144 61017 CVE-2006-2315 1762  View
315145 61017 CVE-2006-2315 http://www.howtoforge.com/forums/showthread.php?t=4123  View
315146 61017 CVE-2006-2315 20060616 Re: [Bugtraq ID: 17909] ISPConfig Session.INC.PHP Remote File Include Vulnerability  View
315147 61017 CVE-2006-2315 17909  View
315148 61017 CVE-2006-2315 ADV-2006-1727  View
315149 61017 CVE-2006-2315 http://www.xorcrew.net/xpa/XPA-ISPConfig.txt  View
315150 61017 CVE-2006-2315 ispconfig-session-inc-file-include(26299)  View

Related JVN