NVD

Id
64003  
Name
CVE-2006-5402  
Description
Multiple PHP remote file inclusion vulnerabilities in PHPmybibli 3.0.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the (1) class_path, (2) javascript_path, and (3) include_path parameters in (a) cart.php; the (4) class_path parameter in (b) index.php; the (5) javascript_path parameter in (c) edit.php; the (6) include_path parameter in (d) circ.php; unspecified parameters in (e) select.php; and unspecified parameters in other files.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-10-18  
Modified Date
2016-10-17  
Seq
2006-5402  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
333739 64003 CVE-2006-5402 http://advisories.echo.or.id/adv/adv55-theday-2006.txt  View
333740 64003 CVE-2006-5402 20061018 CVE-2006-5402, fishy?  View
333741 64003 CVE-2006-5402 20061019 CVE-2006-5402, fishy?  View
333742 64003 CVE-2006-5402 20061017 [ECHO_ADV_55$2006]Phpmybibli <=2.1 Multiple Remote File Inclusion Vulnerability  View
333743 64003 CVE-2006-5402 20578  View
333744 64003 CVE-2006-5402 http://www.sigb.net/patch.php  View
333745 64003 CVE-2006-5402 ADV-2006-4064  View
333746 64003 CVE-2006-5402 phpmybibli-includepath-file-include(29627)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
61051 JVNDB-2006-003317 PHPmybibli における PHP リモートファイルインクルージョンの脆弱性 PHPmybibli には、PHP リモートファイルインクルージョンの脆弱性が存在します。 CVE-2006-5402 21504 CVE-2006-5402 64003 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003317.html 2006-10-18 2012-12-20 View