NVD

Id
61545  
Name
CVE-2006-2860  
Description
PHP remote file inclusion vulnerability in Webspotblogging 3.0.1 allows remote attackers to execute arbitrary PHP code via a URL in the path parameter to (1) inc/logincheck.inc.php, (2) inc/adminheader.inc.php, (3) inc/global.php, or (4) inc/mainheader.inc.php. NOTE: some of these vectors were also reported for 3.0 in a separate disclosure.  
Reject
 
CVSS Version
2  
CVSS Score
6.4  
Severity
Medium  
CVSS Base Score
6.4  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:N)  
Pub Date
2016-12-20  
Published
2006-06-06  
Modified Date
2011-08-10  
Seq
2006-2860  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
318347 61545 CVE-2006-2860 http://arfis.wordpress.com/2007/09/14/rfi-02-webspotblogging/  View
318348 61545 CVE-2006-2860 1871  View
318349 61545 CVE-2006-2860 20060925 WebspotBlogging => 3.0 Remote File Include Vulnerabilities  View
318350 61545 CVE-2006-2860 20061002 Re: WebspotBlogging => 3.0 Remote File Include Vulnerabilities  View
318351 61545 CVE-2006-2860 18260  View
318352 61545 CVE-2006-2860 ADV-2006-2127  View
318353 61545 CVE-2006-2860 webspotblogging-path-file-include(26910)  View

Related JVN