NVD

Id
61562  
Name
CVE-2006-2877  
Description
PHP remote file inclusion vulnerability in Bookmark4U 2.0.0 and earlier allows remote attackers to include arbitrary PHP files via the include_prefix parameter in (1) inc/dbase.php, (2) inc/config.php, (3) inc/common.php, and (4) inc/function.php. NOTE: it has been reported that the inc directory is protected by a .htaccess file, so this issue only applies in certain environments or configurations.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-06-06  
Modified Date
2008-09-05  
Seq
2006-2877  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
318426 61562 CVE-2006-2877 1058  View
318427 61562 CVE-2006-2877 1016224  View
318428 61562 CVE-2006-2877 20060604 Bookmark4U Remote File Include  View
318429 61562 CVE-2006-2877 20060605 Re: Bookmark4U Remote File Include  View
318430 61562 CVE-2006-2877 18281  View
318431 61562 CVE-2006-2877 bookmark4u-includeprefix-file-include(26933)  View

Related JVN