NVD

Id
63268  
Name
CVE-2006-4635  
Description
Unspecified vulnerability in MySource Classic 2.14.6, and possibly earlier, allows remote authenticated users, with superuser privileges, to inject arbitrary PHP code via unspecified vectors related to the Equation attribute in Web_Extensions - Notitia (I/II). NOTE: due to lack of details, it is not clear whether this issue is file inclusion, static code injection, or another type of issue.  
Reject
 
CVSS Version
2  
CVSS Score
6.5  
Severity
Medium  
CVSS Base Score
6.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-09-08  
Modified Date
2011-03-07  
Seq
2006-4635  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
329672 63268 CVE-2006-4635 http://classic.squiz.net/download/changelogs/change_log_2.14.8  View
329673 63268 CVE-2006-4635 19868  View
329674 63268 CVE-2006-4635 ADV-2006-3477  View
329675 63268 CVE-2006-4635 mysource-equation-code-execution(28768)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
60863 JVNDB-2006-003129 MySource Classic における任意の PHP コードを挿入される脆弱性 MySource Classic は、Web_Extensions - Notitia (I/II) 内の Equation 属性に関する処理に不備があるため、任意の PHP コードを挿入される脆弱性が存在します。 CVE-2006-4635 20737 CVE-2006-4635 63268 6.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003129.html 2006-09-08 2012-12-20 View