NVD

Id
61854  
Name
CVE-2006-3175  
Description
Multiple PHP remote file inclusion vulnerabilities in mcGuestbook 1.3 allow remote attackers to execute arbitrary PHP code via a URL in the lang parameter to (1) admin.php, (2) ecrire.php, and (3) lire.php. NOTE: it was later reported that the ecrire.php vector also affects 1.2. NOTE: this issue might be limited to a race condition during installation or an improper installation, since a completed installation creates an include file that prevents external control of the $lang variable.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-06-22  
Modified Date
2008-10-22  
Seq
2006-3175  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
320225 61854 CVE-2006-3175 1125  View
320226 61854 CVE-2006-3175 20060613 file include exploits in mcGuestbook 1.3  View
320227 61854 CVE-2006-3175 20060616 file include exploits in mcGuestbook 1.3  View
320228 61854 CVE-2006-3175 18476  View
320229 61854 CVE-2006-3175 mcguestbook-multiple-file-include(27114)  View

Related JVN