Lucene search

MitreCVE-2006-3749

HistoryJul 21, 2006 - 2:03 p.m.

CVE-2006-3749

2006-07-2114:03:00

CWE-94

mitre

web.nvd.nist.gov

cve-2006-3749

php

remote file inclusion

sitemap component

mambo 4.5.1 cms

vulnerability

nvd

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.6

Confidence

High

EPSS

0.07

Percentile

94.0%

JSON

PHP remote file inclusion vulnerability in sitemap.xml.php in Sitemap component (com_sitemap) 2.0.0 for Mambo 4.5.1 CMS, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.

Affected configurations

Nvd

Node

mambositemapMatch2.0.0

VendorProductVersionCPE
mambositemap2.0.0cpe:2.3:a:mambo:sitemap:2.0.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
mambo	sitemap	2.0.0	cpe:2.3:a:mambo:sitemap:2.0.0:::::::*

References

advisories.echo.or.id/adv/adv38-matdhule-2006.txt

archives.neohapsis.com/archives/bugtraq/2006-07/0180.html

secunia.com/advisories/21055

securityreason.com/securityalert/1249

www.securityfocus.com/bid/18991

www.securityfocus.com/bid/24592

www.vupen.com/english/advisories/2006/2803

exchange.xforce.ibmcloud.com/vulnerabilities/27723

www.exploit-db.com/exploits/2028

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.6

Confidence

High

EPSS

0.07

Percentile

94.0%

JSON

Related for CVE-2006-3749