NVD

Id
62716  
Name
CVE-2006-4059  
Description
Multiple PHP remote file inclusion vulnerabilities in USOLVED NEWSolved Lite 1.9.2, and possibly earlier, allow remote attackers to execute arbitrary PHP code via a URL in the abs_path parameter to (1) newsscript_lyt.php, (2) newsticker/newsscript_get.php, (3) inc/output/news_theme1.php, (4) inc/output/news_theme2.php, or (5) inc/output/news_theme3.php.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-08-09  
Modified Date
2011-03-07  
Seq
2006-4059  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
325976 62716 CVE-2006-4059 2135  View
325977 62716 CVE-2006-4059 1366  View
325978 62716 CVE-2006-4059 http://www.bb-pcsecurity.de/sicherheit_286.htm  View
325979 62716 CVE-2006-4059 20060806 NEWSolved Lite v1.9.2 (abs_path) Remote File Inclusion  View
325980 62716 CVE-2006-4059 19379  View
325981 62716 CVE-2006-4059 http://www.usolved.net/site/index.php  View
325982 62716 CVE-2006-4059 ADV-2006-3200  View
325983 62716 CVE-2006-4059 newsolved-lite-abspath-file-include(28262)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
60739 JVNDB-2006-003005 USOLVED NEWSolved Lite における PHP リモートファイルインクルージョンの脆弱性 USOLVED NEWSolved Lite には、PHP リモートファイルインクルージョンの脆弱性が存在します。 CVE-2006-4059 20161 CVE-2006-4059 62716 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003005.html 2006-08-09 2012-12-20 View