NVD

Id
63357  
Name
CVE-2006-4733  
Description
PHP remote file inclusion vulnerability in sipssys/code/box.inc.php in Haakon Nilsen simple, integrated publishing system (SIPS) 0.3.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the config[sipssys] parameter. NOTE: the product"s documentation recommends placing the affected file outside of the web root, so the scope of issue is limited to admins who do not, or cannot, follow this recommendation.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-09-13  
Modified Date
2008-09-05  
Seq
2006-4733  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
330173 63357 CVE-2006-4733 3245  View
330174 63357 CVE-2006-4733 1549  View
330175 63357 CVE-2006-4733 http://sips.cvs.sourceforge.net/sips/sips/sipssys/code/box.inc.php?revision=1.9&view=markup  View
330176 63357 CVE-2006-4733 20070201 true but: SIPS <= 0.3.1(box.inc.php) Remote File Include Vulnerability  View
330177 63357 CVE-2006-4733 20060910 SIPS v 0.2.2 < = Remote File Include Vulnerability  View
330178 63357 CVE-2006-4733 19945  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
60887 JVNDB-2006-003153 Haakon Nilsen simple などの sipssys/code/box.inc.php における PHP リモートファイルインクルージョンの脆弱性 Haakon Nilsen simple、integrated publishing system (SIPS) の sipssys/code/box.inc.php には、PHP リモートファイルインクルージョンの脆弱性が存在します。 CVE-2006-4733 20835 CVE-2006-4733 63357 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003153.html 2006-09-13 2012-12-20 View