NVD

Id
62832  
Name
CVE-2006-4191  
Description
Directory traversal vulnerability in memcp.php in XMB (Extreme Message Board) 1.9.6 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the langfilenew parameter, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, which is then included by header.php.  
Reject
 
CVSS Version
2  
CVSS Score
5.1  
Severity
Medium  
CVSS Base Score
5.1  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-08-16  
Modified Date
2011-03-07  
Seq
2006-4191  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
326672 62832 CVE-2006-4191 2178  View
326673 62832 CVE-2006-4191 http://retrogod.altervista.org/xmb_196_sql.html  View
326674 62832 CVE-2006-4191 1411  View
326675 62832 CVE-2006-4191 20060813 XMB <= 1.9.6 Final basename()/"langfilenew" arbitrary local inclusion / remote commands execution  View
326676 62832 CVE-2006-4191 19494  View
326677 62832 CVE-2006-4191 19501  View
326678 62832 CVE-2006-4191 xmb-memcp-file-include(28356)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
60766 JVNDB-2006-003032 XMB の memcp.php におけるディレクトリトラバーサルの脆弱性 XMB (Extreme Message Board) の memcp.php には、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2006-4191 20293 CVE-2006-4191 62832 5.1 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003032.html 2006-08-16 2012-12-20 View