Lucene search

MitreCVE-2006-3527

HistoryJul 12, 2006 - 12:05 a.m.

CVE-2006-3527

2006-07-1200:05:00

mitre

web.nvd.nist.gov

cve

2006

3527

php

remote file inclusion

bosclassifieds

classified ads

url

vulnerability

nvd

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

Confidence

Low

EPSS

0.251

Percentile

96.7%

JSON

Multiple PHP remote file inclusion vulnerabilities in BosClassifieds Classified Ads allow remote attackers to execute arbitrary PHP code via a URL in the insPath parameter to (1) index.php, (2) recent.php, (3) account.php, (4) classified.php, or (5) search.php.

Affected configurations

Nvd

Node

bosdevbosclassifieds_classified_ads

VendorProductVersionCPE
bosdevbosclassifieds_classified_ads*cpe:2.3:a:bosdev:bosclassifieds_classified_ads:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
bosdev	bosclassifieds_classified_ads	*	cpe:2.3:a:bosdev:bosclassifieds_classified_ads::::::::

References

secunia.com/advisories/21056

securitytracker.com/id?1016447

www.jaascois.com/exploits/18602018/

www.osvdb.org/27314

www.osvdb.org/27315

www.osvdb.org/27316

www.osvdb.org/27317

www.osvdb.org/27318

www.securityfocus.com/bid/18883

www.vupen.com/english/advisories/2006/2807

exchange.xforce.ibmcloud.com/vulnerabilities/27662

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

Confidence

Low

EPSS

0.251

Percentile

96.7%

JSON

Related for CVE-2006-3527