NVD

Id
61544  
Name
CVE-2006-2859  
Description
** DISPUTED ** PHP remote file inclusion vulnerability in MyBloggie 2.1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the mybloggie_root_path parameter to (1) admin.php or (2) scode.php. NOTE: this issue has been disputed in multiple third party followups, which say that the MyBloggie source code does not demonstrate the issue, so it might be the result of another module. CVE analysis as of 20060605 agrees with the dispute. In addition, scode.php is not part of the MyBloggie distribution.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-06-06  
Modified Date
2008-09-05  
Seq
2006-2859  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
318342 61544 CVE-2006-2859 1049  View
318343 61544 CVE-2006-2859 20060602 # MHG Security Team --- MyBloggie 2.1.1 version Remote File Include Vulnerabilit  View
318344 61544 CVE-2006-2859 20060603 Re: # MHG Security Team --- MyBloggie 2.1.1 version Remote File Include Vulnerabilit  View
318345 61544 CVE-2006-2859 20060606 Re: # MHG Security Team --- MyBloggie 2.1.1 version Remote File Include Vulnerabilit  View
318346 61544 CVE-2006-2859 18241  View

Related JVN