NVD

Id
63392  
Name
CVE-2006-4768  
Description
Multiple direct static code injection vulnerabilities in add_go.php in Stefan Ernst Newsscript (aka WM-News) 0.5 beta allow remote attackers to execute arbitrary PHP code via the (1) description, (2) issue, (3) title, (4) var, (5) name, (6) keywords, and (7) note parameters, which are stored in an article file. NOTE: the original source of this vulnerability is unknown; the details are obtained from third party information and CVE post-disclosure analysis.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:P/A:N)  
Pub Date
2016-12-20  
Published
2006-09-13  
Modified Date
2016-11-28  
Seq
2006-4768  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
330323 63392 CVE-2006-4768 84155  View
330324 63392 CVE-2006-4768 ADV-2006-3558  View
330325 63392 CVE-2006-4768 newsscript-add-command-execution(28900)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
60899 JVNDB-2006-003165 Stefan Ernst Newsscript の add_go.php における任意の PHP コードを実行される脆弱性 Stefan Ernst Newsscript の add_go.php は、直接静的コードを挿入されることにより、任意の PHP コードを実行される脆弱性が存在します。 CVE-2006-4768 20870 CVE-2006-4768 63392 5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003165.html 2006-09-13 2012-12-20 View