Lucene search
MitreCVE-2006-2361HistoryMay 15, 2006 - 4:06 p.m.
CVE-2006-2361
2006-05-1516:06:00
mitre
web.nvd.nist.gov
29
php
vulnerability
download manager
remote file inclusion
pafiledb
phpbb
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.5
Confidence
High
EPSS
0.237
Percentile
96.6%
PHP remote file inclusion vulnerability in pafiledb_constants.php in Download Manager (mxBB pafiledb) integration, as used with phpBB, allows remote attackers to execute arbitrary PHP code via a URL in the module_root_path parameter.
Affected configurations
Node
mxbbmxbb_portalMatch2.7
ORmxbbmxbb_portalMatch2.8
ORphp_arenapafiledbMatch1.1.3
ORphp_arenapafiledbMatch2.0.1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| mxbb | mxbb_portal | 2.7 | cpe:2.3:a:mxbb:mxbb_portal:2.7:*:*:*:*:*:*:* |
| mxbb | mxbb_portal | 2.8 | cpe:2.3:a:mxbb:mxbb_portal:2.8:*:*:*:*:*:*:* |
| php_arena | pafiledb | 1.1.3 | cpe:2.3:a:php_arena:pafiledb:1.1.3:*:*:*:*:*:*:* |
| php_arena | pafiledb | 2.0.1 | cpe:2.3:a:php_arena:pafiledb:2.0.1:*:*:*:*:*:*:* |
Related
nvd
nvd
CVE-2006-2361
2006-05-15 16:06:00
exploitdb
exploitdb
pafileDB 2.0.1 - 'mxBB'/'phpBB' Remote File Inclusion
2006-05-09 00:00:00
prion
prion
Remote file inclusion
2006-05-15 16:06:00
cvelist
cvelist
CVE-2006-2361
2006-05-15 16:00:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.5
Confidence
High
EPSS
0.237
Percentile
96.6%
Related for CVE-2006-2361