HIGH
Multiple PHP remote file inclusion vulnerabilities in L
Published Nov 29, 2006
7.5
HIGHCVSS 2.0
EPSS 1.80%
Description
Multiple PHP remote file inclusion vulnerabilities in L. Brandon Stone and Nathanial P. Hendler Active PHP Bookmarks (APB) 1.1.02 allow remote attackers to execute arbitrary PHP code via a URL in the APB_SETTINGS['apb_path'] parameter in (1) apb_common.php or (2) apb.php. NOTE: CVE and another third party dispute this vulnerability because these PHP scripts exit if the attack vectors are present in GPC variables
Affected products
No data.
- 1.1.02
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (0)
No CWE recorded.
References (6)
- http://www.osvdb.org/31956 vdb-entryx_refsource_OSVDB
- http://www.securityfocus.com/archive/1/452490/100/0/threaded mailing-listx_refsource_BUGTRAQ
- http://www.securityfocus.com/archive/1/452559/100/0/threaded mailing-listx_refsource_BUGTRAQ
- http://www.securityfocus.com/bid/21263 vdb-entryx_refsource_BID
- http://www.securityfocus.com/bid/23670 vdb-entryx_refsource_BID
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30518 vdb-entryx_refsource_XF
| Link | Providers | Tags |
|---|---|---|
| http://www.osvdb.org/31956 | vdb-entryx_refsource_OSVDB | |
| http://www.securityfocus.com/archive/1/452490/100/0/threaded | mailing-listx_refsource_BUGTRAQ | |
| http://www.securityfocus.com/archive/1/452559/100/0/threaded | mailing-listx_refsource_BUGTRAQ | |
| http://www.securityfocus.com/bid/21263 | vdb-entryx_refsource_BID | |
| http://www.securityfocus.com/bid/23670 | vdb-entryx_refsource_BID | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/30518 | vdb-entryx_refsource_XF |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Nov 29, 2006
Updated Aug 7, 2024
Reserved Nov 28, 2006
Link CVE-2006-6167
CISA Vulnrichment
Updated n/a