NVD

Id
63406  
Name
CVE-2006-4782  
Description
src/index.php in WebSPELL 4.01.01 and earlier, when register_globals is enabled, allows remote attackers to bypass authentication and gain sensitive information stored in the database via a modified userID parameter in a write action to admin/database.php.  
Reject
 
CVSS Version
2  
CVSS Score
5.4  
Severity
Medium  
CVSS Base Score
5.4  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:C/I:N/A:N)  
Pub Date
2016-12-20  
Published
2006-09-14  
Modified Date
2011-03-07  
Seq
2006-4782  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
330403 63406 CVE-2006-4782 http://cms.webspell.org/index.php?site=files&file=15  View
330404 63406 CVE-2006-4782 2352  View
330405 63406 CVE-2006-4782 19975  View
330406 63406 CVE-2006-4782 ADV-2006-3572  View
330407 63406 CVE-2006-4782 webspell-login-authentication-bypass(28896)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
60903 JVNDB-2006-003169 WebSPELL の src/index.php における認証を回避される脆弱性 WebSPELL の src/index.php には、register_globals が有効になっている際、認証を回避される、およびデータベースに格納された重要な情報を取得される脆弱性が存在します。 CVE-2006-4782 20884 CVE-2006-4782 63406 5.4 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003169.html 2006-09-14 2012-12-20 View