NVD

Id
63310  
Name
CVE-2006-4677  
Description
** DISPUTED ** PHP remote file inclusion vulnerability in contrib/yabbse/poc.php in phpopenchat before 3.0.2 allows remote attackers to execute arbitrary PHP code via the sourcedir parameter. NOTE: this issue was disputed by a third-party researcher who stated that the _REQUEST parameters were dynamically unset at the beginning of the file. Another researcher noted, and CVE agrees, that the unset PHP function can be bypassed (CVE-2006-3017). If this issue is due to a vulnerability in PHP, then it should be excluded from CVE.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-09-11  
Modified Date
2008-09-05  
Seq
2006-4677  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
329892 63310 CVE-2006-4677 http://phpopenchat.org/index.php  View
329893 63310 CVE-2006-4677 20060906 WDT :-phpopenchat-3.0.* ($sourcedir) Remote File Inclusion Exploit  View
329894 63310 CVE-2006-4677 20060907 Re: WDT :-phpopenchat-3.0.* ($sourcedir) Remote File Inclusion Exploit  View
329895 63310 CVE-2006-4677 20060908 AW: WDT :-phpopenchat-3.0.* ($sourcedir) Remote File Inclusion Exploit  View

Related JVN