Lucene search
MitreCVE-2006-2890HistoryJun 07, 2006 - 10:02 a.m.
CVE-2006-2890
2006-06-0710:02:00
mitre
web.nvd.nist.gov
24
pixelpost
cve-2006-2890
remote attackers
admin privileges
security vulnerability
CVSS2
5.1
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:P/I:P/A:P
AI Score
6.9
Confidence
Low
EPSS
0.023
Percentile
89.7%
Pixelpost 1-5rc1-2 and earlier, when register_globals is enabled, allows remote attackers to gain administrator privileges and conduct other attacks by setting the _SESSION[“pixelpost_admin”] parameter to 1 in calls to admin scripts such as admin/view_info.php.
Affected configurations
Node
pixelpostpixelpostMatch1.5_rc1
Related
prion
prion
Code injection
2006-06-07 10:02:00
cvelist
cvelist
CVE-2006-2890
2006-06-07 10:00:00
nvd
nvd
CVE-2006-2890
2006-06-07 10:02:00
CVSS2
5.1
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:P/I:P/A:P
AI Score
6.9
Confidence
Low
EPSS
0.023
Percentile
89.7%
Related for CVE-2006-2890