NVD

Id
64370  
Name
CVE-2006-5795  
Description
Multiple PHP remote file inclusion vulnerabilities in OpenEMR 2.8.1 and earlier, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the srcdir parameter to (a) billing_process.php, (b) billing_report.php, (c) billing_report_xml.php, and (d) print_billing_report.php in interface/billing/; (e) login.php; (f) interface/batchcom/batchcom.php; (g) interface/login/login.php; (h) main_info.php and (i) main.php in interface/main/; (j) interface/new/new_patient_save.php; (k) interface/practice/ins_search.php; (l) interface/logout.php; (m) custom_report_range.php, (n) players_report.php, and (o) front_receipts_report.php in interface/reports/; (p) facility_admin.php, (q) usergroup_admin.php, and (r) user_info.php in interface/usergroup/; or (s) custom/import_xml.php.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-11-08  
Modified Date
2011-03-07  
Seq
2006-5795  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
335947 64370 CVE-2006-5795 http://advisories.echo.or.id/adv/adv60-theday-2006.txt  View
335948 64370 CVE-2006-5795 2727  View
335949 64370 CVE-2006-5795 1834  View
335950 64370 CVE-2006-5795 20061106 [ECHO_ADV_60_2006] OpenEMR <=2.8.1 Multiple Remote File Inclusion Vulnerability  View
335951 64370 CVE-2006-5795 ADV-2006-4382  View
335952 64370 CVE-2006-5795 openemr-srcdir-file-include(30036)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
60117 JVNDB-2006-002383 OpenEMR における PHP リモートファイルインクルージョンの脆弱性 OpenEMR には、register_globals が有効になっている際、PHP リモートファイルインクルージョンの脆弱性が存在します。 CVE-2006-5795 21897 CVE-2006-5795 64370 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-002383.html 2006-11-08 2012-09-25 View