NVD

Id
63707  
Name
CVE-2006-5101  
Description
PHP remote file inclusion vulnerability in include.php in Comdev CSV Importer 3.1 and possibly 4.1, as used in (1) Comdev Contact Form 3.1, (2) Comdev Customer Helpdesk 3.1, (3) Comdev Events Calendar 3.1, (4) Comdev FAQ Support 3.1, (5) Comdev Guestbook 3.1, (6) Comdev Links Directory 3.1, (7) Comdev News Publisher 3.1, (8) Comdev Newsletter 3.1, (9) Comdev Photo Gallery 3.1, (10) Comdev Vote Caster 3.1, (11) Comdev Web Blogger 3.1, and (12) Comdev eCommerce 3.1, allows remote attackers to execute arbitrary PHP code via a URL in the path[docroot] parameter. NOTE: it has been reported that 4.1 versions might also be affected.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-10-03  
Modified Date
2011-08-22  
Seq
2006-5101  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
332031 63707 CVE-2006-5101 1658  View
332032 63707 CVE-2006-5101 20060927 Comdev CSV Importer 3.1 :) <= Remote File Inclusion  View
332033 63707 CVE-2006-5101 20060927 Comdev Links Directory 3.1 :) <= Remote File Inclusion  View
332034 63707 CVE-2006-5101 20060927 Comdev Vote Caster 3.1 :) <= Remote File Inclusion  View
332035 63707 CVE-2006-5101 20060927 Comdev Photo Gallery 3.1 :) <= Remote File Inclusion  View
332036 63707 CVE-2006-5101 20060927 Comdev Customer Helpdesk 3.1 :) <= Remote File Inclusion  View
332037 63707 CVE-2006-5101 20060927 Comdev News Publisher 3.1 :) <= Remote File Inclusion  View
332038 63707 CVE-2006-5101 20060927 Comdev Contact Form 3.1 :) <= Remote File Inclusion  View
332039 63707 CVE-2006-5101 20060927 Comdev Web Blogger 3.1 :) <= Remote File Inclusion  View
332040 63707 CVE-2006-5101 20060927 Comdev eCommerce 3.1 :) <= Remote File Inclusion  View
332041 63707 CVE-2006-5101 20060927 Comdev FAQ Support 3.1 :) <= Remote File Inclusion  View
332042 63707 CVE-2006-5101 20060927 Comdev Guestbook 3.1 :) <= Remote File Inclusion  View
332043 63707 CVE-2006-5101 20060927 Comdev Newsletter 3.1 :) <= Remote File Inclusion  View
332044 63707 CVE-2006-5101 20060927 Comdev Events Calendar 3.1 :) <= Remote File Inclusion  View
332045 63707 CVE-2006-5101 ADV-2006-3803  View
332046 63707 CVE-2006-5101 ADV-2006-3804  View
332047 63707 CVE-2006-5101 ADV-2006-3805  View
332048 63707 CVE-2006-5101 ADV-2006-3806  View
332049 63707 CVE-2006-5101 ADV-2006-3807  View
332050 63707 CVE-2006-5101 ADV-2006-3808  View
332051 63707 CVE-2006-5101 ADV-2006-3809  View
332052 63707 CVE-2006-5101 ADV-2006-3810  View
332053 63707 CVE-2006-5101 ADV-2006-3811  View
332054 63707 CVE-2006-5101 ADV-2006-3812  View
332055 63707 CVE-2006-5101 ADV-2006-3813  View
332056 63707 CVE-2006-5101 ADV-2006-3814  View
332057 63707 CVE-2006-5101 ADV-2006-3815  View
332058 63707 CVE-2006-5101 comdev-include-file-include(29220)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
59070 JVNDB-2006-001336 Comdev CSV Importer の include.php における PHP リモートファイルインクルージョンの脆弱性 以下の製品で使用される Comdev CSV Importer の include.php は、PHP リモートファイルインクルージョンの脆弱性が存在します。 CVE-2006-5101 21203 CVE-2006-5101 63707 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-001336.html 2006-10-03 2012-06-26 View