CVE-2006-5816 - Multiple PHP remote file inclusion vulnerabilities in Dmitry Sheiko Business Card Web Builder (BCWB) 2.5 allow remote attackers to execute arbitrary PHP code via a URL in the root_path_admin parameter to (1) /include/startup.inc.php, (2) dcontent/default.css.php, or (3) system/default.css.php, different vectors than CVE-2006-4946

Back Back to CVE browser

HIGH

Multiple PHP remote file inclusion vulnerabilities in Dmitry Sheiko Business Card Web Builder (BCWB) 2.5 allow remote attackers to execute arbitrary PHP code via a URL in the root_path_admin parameter to (1) /include/startup.inc.php, (2) dcontent/default.css.php, or (3) system/default.css.php, different vectors than CVE-2006-4946

Published Nov 8, 2006

7.5

HIGH

CVSS 2.0

EPSS 1.46%

Description

Multiple PHP remote file inclusion vulnerabilities in Dmitry Sheiko Business Card Web Builder (BCWB) 2.5 allow remote attackers to execute arbitrary PHP code via a URL in the root_path_admin parameter to (1) /include/startup.inc.php, (2) dcontent/default.css.php, or (3) system/default.css.php, different vectors than CVE-2006-4946.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (4)

http://securityreason.com/securityalert/1836
third-party-advisoryx_refsource_SREASON
http://www.securityfocus.com/archive/1/450069/100/100/threaded
mailing-listx_refsource_BUGTRAQ
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-5800
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/29905
vdb-entryx_refsource_XF

Link	Providers	Tags
http://securityreason.com/securityalert/1836		third-party-advisoryx_refsource_SREASON
http://www.securityfocus.com/archive/1/450069/100/100/threaded		mailing-listx_refsource_BUGTRAQ
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-5800		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/29905		vdb-entryx_refsource_XF