NVD

Id
64033  
Name
CVE-2006-5432  
Description
Multiple direct static code injection vulnerabilities in db/txt.inc.php in phpPowerCards 2.10, when register_globals is enabled, allow remote attackers to create or overwrite arbitrary files via the (1) email[to], (2) email[from], (3) name[to], (4) name[from], (5) picture, (6) comment, or (7) sessionID parameter, as demonstrated by creating a new .php file that permits remote file inclusion, and then requesting this file.  
Reject
 
CVSS Version
2  
CVSS Score
2.6  
Severity
Low  
CVSS Base Score
2.6  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:N/I:P/A:N)  
Pub Date
2016-12-20  
Published
2006-10-20  
Modified Date
2011-03-07  
Seq
2006-5432  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
333884 64033 CVE-2006-5432 2590  View
333885 64033 CVE-2006-5432 20620  View
333886 64033 CVE-2006-5432 ADV-2006-4105  View
333887 64033 CVE-2006-5432 phppowercards-txt-code-execution(29669)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
60032 JVNDB-2006-002298 phpPowerCards の db/txt.inc.php における任意のファイルを上書きされる脆弱性 phpPowerCards の db/txt.inc.php は、register_globals が有効になっている際、直接静的コードを挿入されることにより、任意のファイルを作成および上書きされる脆弱性が存在します。 CVE-2006-5432 21534 CVE-2006-5432 64033 2.6 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-002298.html 2006-10-20 2012-09-25 View