NVD

Id
63479  
Name
CVE-2006-4863  
Description
** DISPUTED ** Multiple PHP remote file inclusion vulnerabilities in Marc Cagninacci mcLinksCounter 1.1 allow remote attackers to execute arbitrary PHP code via a URL in the langfile parameter in (1) login.php, (2) stats.php, (3) detail.php, or (4) erase.php. NOTE: CVE and a third party dispute this vulnerability, because the langfile parameter is set to english.php in each file. NOTE: CVE also disputes a later report of this vulnerability in 1.2, because the langfile parameter is set to french.php in 1.2.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-09-19  
Modified Date
2016-10-17  
Seq
2006-4863  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
330867 63479 CVE-2006-4863 20060918 Re: mcLinksCounter v1.1 - Remote File Include Vulnerabilities  View
330868 63479 CVE-2006-4863 http://securityvulns.com/Rdocument844.html  View
330869 63479 CVE-2006-4863 http://securityvulns.com/source26994.html  View
330870 63479 CVE-2006-4863 20060914 mcLinksCounter v1.1 - Remote File Include Vulnerabilities  View
330871 63479 CVE-2006-4863 20070821 Vulnerabilities digest  View
330872 63479 CVE-2006-4863 20070822 Re: Vulnerabilities digest  View
330873 63479 CVE-2006-4863 20071010 Vulnerabilities digest  View

Related JVN