NVD

Id
64022  
Name
CVE-2006-5421  
Description
WSN Forum 1.3.4 and earlier allows remote attackers to execute arbitrary PHP code via a modified pathname in the pathtoconfig parameter that points to an avatar image that contains PHP code, which is then accessed from prestart.php. NOTE: this issue has been labeled remote file inclusion, but that label only applies to the attack, not the underlying vulnerability.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-10-20  
Modified Date
2011-03-07  
Seq
2006-5421  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
333839 64022 CVE-2006-5421 2583  View
333840 64022 CVE-2006-5421 20586  View
333841 64022 CVE-2006-5421 ADV-2006-4081  View
333842 64022 CVE-2006-5421 wsnforum-prestart-file-upload(29635)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
61058 JVNDB-2006-003324 WSN Forum における任意の PHP コードを実行される脆弱性 WSN Forum には、任意の PHP コードを実行される脆弱性が存在します。 CVE-2006-5421 21523 CVE-2006-5421 64022 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003324.html 2006-10-20 2012-12-20 View