NVD

Id
61430  
Name
CVE-2006-2745  
Description
Multiple PHP remote file inclusion vulnerabilities in F@cile Interactive Web 0.8.5 and earlier, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the (1) pathfile parameter in (a) p-editpage.php and (b) p-editbox.php, and the (2) mytheme and (3) myskin parameters in multiple "p-themes" index.inc.php files including (c) lowgraphic, (d) classic, (e) puzzle, (f) simple, and (g) ciao.  
Reject
 
CVSS Version
2  
CVSS Score
5.1  
Severity
Medium  
CVSS Base Score
5.1  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-06-01  
Modified Date
2011-03-07  
Seq
2006-2745  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
317428 61430 CVE-2006-2745 1010  View
317429 61430 CVE-2006-2745 http://www.nukedx.com/?getxpl=35  View
317430 61430 CVE-2006-2745 http://www.nukedx.com/?viewdoc=35  View
317431 61430 CVE-2006-2745 20060528 Advisory: F@cile Interactive Web <= 0.8x Multiple RemoteVulnerabilities.  View
317432 61430 CVE-2006-2745 18149  View
317433 61430 CVE-2006-2745 ADV-2006-2036  View
317434 61430 CVE-2006-2745 f@cile-peditpage-peditbox-file-include(26841)  View
317435 61430 CVE-2006-2745 f@cile-themes-file-include(26854)  View

Related JVN