Lucene search
MitreCVE-2006-0940HistoryMar 01, 2006 - 2:02 a.m.
CVE-2006-0940
2006-03-0102:02:00
mitre
web.nvd.nist.gov
27
cve
2006
0940
code injection
remote attackers
php
settings.php
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.9
Confidence
Low
EPSS
0.151
Percentile
95.9%
Multiple direct static code injection vulnerabilities in savesettings.php in ShoutLIVE 1.1.0 allow remote attackers to execute arbitrary PHP code via variables that are written to settings.php.
Affected configurations
Node
cynical_gamesshoutliveMatch1.1.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| cynical_games | shoutlive | 1.1.0 | cpe:2.3:a:cynical_games:shoutlive:1.1.0:*:*:*:*:*:*:* |
References
Related
exploitdb
exploitdb
ShoutLIVE 1.1.0 - 'savesettings.php' Remote Code Execution
2006-03-18 00:00:00
prion
prion
Code injection
2006-03-01 02:02:00
nvd
nvd
CVE-2006-0940
2006-03-01 02:02:00
cvelist
cvelist
CVE-2006-0940
2006-03-01 02:00:00
packetstorm
packetstorm
EV0087.txt
2006-03-09 00:00:00
securityvulns
securityvulns
[eVuln] ShoutLIVE PHP Code Execution & Multiple XSS Vulnerabilities
2006-03-08 00:00:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.9
Confidence
Low
EPSS
0.151
Percentile
95.9%
Related for CVE-2006-0940