NVD

Id
63894  
Name
CVE-2006-5291  
Description
PHP remote file inclusion vulnerability in admin/includes/spaw/spaw_control.class.php in Download-Engine 1.4.2 allows remote attackers to execute arbitrary PHP code via a URL in the spaw_root parameter. NOTE: CVE analysis suggests that this issue is actually in a third party product, SPAW Editor PHP Edition, so this issue is probably a duplicate of CVE-2006-4656.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-10-16  
Modified Date
2011-08-23  
Seq
2006-5291  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
333030 63894 CVE-2006-5291 2521  View
333031 63894 CVE-2006-5291 1723  View
333032 63894 CVE-2006-5291 http://spaw.cvs.sourceforge.net/spaw/spaw/docs/ChangeLog.txt?view=markup  View
333033 63894 CVE-2006-5291 http://spaw.cvs.sourceforge.net/spaw/spaw/spaw_control.class.php?r1=1.19&r2=1.20  View
333034 63894 CVE-2006-5291 http://spaw.cvs.sourceforge.net/spaw/spaw/spaw_control.class.php?r1=1.25&r2=1.26  View
333035 63894 CVE-2006-5291 20061012 Download-Engine Remote File Include  View
333036 63894 CVE-2006-5291 20500  View
333037 63894 CVE-2006-5291 ADV-2006-4025  View
333038 63894 CVE-2006-5291 downloadengine-spaw-file-include(29493)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
59123 JVNDB-2006-001389 Download-Engine の admin/includes/spaw/spaw_control.class.php におけるにおける PHP リモートファイルインクルージョンの脆弱性 Download-Engine の admin/includes/spaw/spaw_control.class.php は、PHP リモートファイルインクルージョンの不備があるため、PHP リモートファイルインクルージョンの脆弱性が存在します。 CVE-2006-5291 21393 CVE-2006-5291 63894 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-001389.html 2006-10-16 2012-06-26 View