NVD

Id
62709  
Name
CVE-2006-4052  
Description
Multiple PHP remote file inclusion vulnerabilities in Turnkey Web Tools PHP Simple Shop 2.0 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the abs_path parameter to (1) admin/index.php, (2) admin/adminindex.php, (3) admin/adminglobal.php, (4) admin/login.php, (5) admin/menu.php or (6) admin/header.php.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-08-09  
Modified Date
2011-03-07  
Seq
2006-4052  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
325940 62709 CVE-2006-4052 http://advisories.echo.or.id/adv/adv44-matdhule-2006.txt  View
325941 62709 CVE-2006-4052 2119  View
325942 62709 CVE-2006-4052 1016644  View
325943 62709 CVE-2006-4052 20060807 [ECHO_ADV_44$2006] PHP Simple Shop <= 2.0 (abs_path) Remote File Inclusion  View
325944 62709 CVE-2006-4052 ADV-2006-3171  View
325945 62709 CVE-2006-4052 phpsimpleshop-abspath-file-include(28247)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
60735 JVNDB-2006-003001 Turnkey Web Tools PHP Simple Shop における PHP リモートファイルインクルージョンの脆弱性 Turnkey Web Tools PHP Simple Shop には、PHP リモートファイルインクルージョンの脆弱性が存在します。 CVE-2006-4052 20154 CVE-2006-4052 62709 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003001.html 2006-08-09 2012-12-20 View