Lucene search
HistoryMar 10, 2006 - 11:02 a.m.
CVE-2006-1149
cve-2006-1149
php
remote file inclusion
owl intranet engine
vulnerability
nvd
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
6.8 Medium
AI Score
Confidence
High
0.1 Low
EPSS
Percentile
95.0%
PHP remote file inclusion vulnerability in lib/OWL_API.php in OWL Intranet Engine 0.82, when register_globals is enabled, allows remote attackers to include arbitrary files via a URL in the xrms_file_root parameter, which is not initialized before use.
Affected configurations
Node
owlowl_intranet_engineMatch0.6
ORowlowl_intranet_engineMatch0.8
ORowlowl_intranet_engineMatch0.72
ORowlowl_intranet_engineMatch0.73
ORowlowl_intranet_engineMatch0.82
Related
nvd
nvd
CVE-2006-1149
2006-03-10 11:02:00
cvelist
cvelist
CVE-2006-1149
2006-03-10 11:00:00
nessus
nessus
prion
prion
Remote file inclusion
2006-03-10 11:02:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
6.8 Medium
AI Score
Confidence
High
0.1 Low
EPSS
Percentile
95.0%
Related for CVE-2006-1149