Lucene search

MitreCVE-2006-2285

HistoryMay 10, 2006 - 2:14 a.m.

CVE-2006-2285

2006-05-1002:14:00

mitre

web.nvd.nist.gov

cve-2006-2285

php

remote file inclusion

vulnerability

authldap.php

dokeos 1.6.4

nvd

CVSS2

5.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

AI Score

7.5

Confidence

High

EPSS

0.088

Percentile

94.6%

JSON

PHP remote file inclusion vulnerability in authldap.php in Dokeos 1.6.4 allows remote attackers to execute arbitrary PHP code via a URL in the includePath parameter.

Affected configurations

Nvd

Node

dokeosopen_source_learning_and_knowledge_management_toolMatch1.4

dokeosopen_source_learning_and_knowledge_management_toolMatch1.5

dokeosopen_source_learning_and_knowledge_management_toolMatch1.5.3

dokeosopen_source_learning_and_knowledge_management_toolMatch1.5.4

dokeosopen_source_learning_and_knowledge_management_toolMatch1.5.5

dokeosopen_source_learning_and_knowledge_management_toolMatch1.6.4

dokeosopen_source_learning_and_knowledge_management_toolMatch1.6_rc2

VendorProductVersionCPE
dokeosopen_source_learning_and_knowledge_management_tool1.4cpe:2.3:a:dokeos:open_source_learning_and_knowledge_management_tool:1.4:*:*:*:*:*:*:*
dokeosopen_source_learning_and_knowledge_management_tool1.5cpe:2.3:a:dokeos:open_source_learning_and_knowledge_management_tool:1.5:*:*:*:*:*:*:*
dokeosopen_source_learning_and_knowledge_management_tool1.5.3cpe:2.3:a:dokeos:open_source_learning_and_knowledge_management_tool:1.5.3:*:*:*:*:*:*:*
dokeosopen_source_learning_and_knowledge_management_tool1.5.4cpe:2.3:a:dokeos:open_source_learning_and_knowledge_management_tool:1.5.4:*:*:*:*:*:*:*
dokeosopen_source_learning_and_knowledge_management_tool1.5.5cpe:2.3:a:dokeos:open_source_learning_and_knowledge_management_tool:1.5.5:*:*:*:*:*:*:*
dokeosopen_source_learning_and_knowledge_management_tool1.6.4cpe:2.3:a:dokeos:open_source_learning_and_knowledge_management_tool:1.6.4:*:*:*:*:*:*:*
dokeosopen_source_learning_and_knowledge_management_tool1.6_rc2cpe:2.3:a:dokeos:open_source_learning_and_knowledge_management_tool:1.6_rc2:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
dokeos	open_source_learning_and_knowledge_management_tool	1.4	cpe:2.3:a:dokeos:open_source_learning_and_knowledge_management_tool:1.4:::::::*
dokeos	open_source_learning_and_knowledge_management_tool	1.5	cpe:2.3:a:dokeos:open_source_learning_and_knowledge_management_tool:1.5:::::::*
dokeos	open_source_learning_and_knowledge_management_tool	1.5.3	cpe:2.3:a:dokeos:open_source_learning_and_knowledge_management_tool:1.5.3:::::::*
dokeos	open_source_learning_and_knowledge_management_tool	1.5.4	cpe:2.3:a:dokeos:open_source_learning_and_knowledge_management_tool:1.5.4:::::::*
dokeos	open_source_learning_and_knowledge_management_tool	1.5.5	cpe:2.3:a:dokeos:open_source_learning_and_knowledge_management_tool:1.5.5:::::::*
dokeos	open_source_learning_and_knowledge_management_tool	1.6.4	cpe:2.3:a:dokeos:open_source_learning_and_knowledge_management_tool:1.6.4:::::::*
dokeos	open_source_learning_and_knowledge_management_tool	1.6_rc2	cpe:2.3:a:dokeos:open_source_learning_and_knowledge_management_tool:1.6_rc2:::::::*

References

secunia.com/advisories/19980

securityreason.com/securityalert/856

securitytracker.com/id?1016089

www.osvdb.org/25437

www.securityfocus.com/archive/1/433247/100/0/threaded

www.securityfocus.com/bid/17873

www.securityfocus.com/bid/17915

www.vupen.com/english/advisories/2006/1680

exchange.xforce.ibmcloud.com/vulnerabilities/26274

CVSS2

5.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

AI Score

7.5

Confidence

High

EPSS

0.088

Percentile

94.6%

JSON

Related for CVE-2006-2285