NVD

Id
61025  
Name
CVE-2006-2323  
Description
Multiple PHP remote file inclusion vulnerabilities in SmartISoft phpListPro 2.01 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the returnpath parameter in (1) editsite.php, (2) addsite.php, and (3) in.php. NOTE: The config.php vector is already covered by CVE-2006-1749.  
Reject
 
CVSS Version
2  
CVSS Score
5.1  
Severity
Medium  
CVSS Base Score
5.1  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-05-11  
Modified Date
2008-09-05  
Seq
2006-2323  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
315196 61025 CVE-2006-2323 156  View
315197 61025 CVE-2006-2323 688  View
315198 61025 CVE-2006-2323 882  View
315199 61025 CVE-2006-2323 1016060  View
315200 61025 CVE-2006-2323 20060508 [MajorSecurity] phpListPro <= 2.01 - Multiple Remote File Include Vulnerability  View
315201 61025 CVE-2006-2323 20060508 PhpListPro 2.01 Remote File Include Vulnerability  View
315202 61025 CVE-2006-2323 phplistpro-multiple-file-include(26359)  View

Related JVN