NVD

Id
63163  
Name
CVE-2006-4530  
Description
Direct static code injection vulnerability in include/change.php in membrepass 1.5 allows remote attackers to execute arbitrary PHP code via the aifon parameter, which is injected into include/variable.php.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-09-01  
Modified Date
2011-03-07  
Seq
2006-4530  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
328949 63163 CVE-2006-4530 1487  View
328950 63163 CVE-2006-4530 20060831 Membrepass v1.5 Php code execution, Xss, Sql Injection  View
328951 63163 CVE-2006-4530 19790  View
328952 63163 CVE-2006-4530 ADV-2006-3427  View
328953 63163 CVE-2006-4530 membrepass-include-file-include(28692)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
59779 JVNDB-2006-002045 membrepass の include/change.php における任意の PHP コードを実行される脆弱性 membrepass の include/change.php には、直接静的コードを挿入されることにより、任意の PHP コードを実行される脆弱性が存在します。 CVE-2006-4530 20632 CVE-2006-4530 63163 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-002045.html 2006-09-01 2012-09-25 View