Lucene search

[email protected]CVE-2006-4065

HistoryAug 10, 2006 - 12:04 a.m.

CVE-2006-4065

2006-08-1000:04:00

[email protected]

web.nvd.nist.gov

cve-2006-4065

php

remote file inclusion

dmitry sheiko

sapid gallery 1.0

nvd

5.1 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

8 High

AI Score

Confidence

Low

0.012 Low

EPSS

Percentile

85.0%

JSON

Multiple PHP remote file inclusion vulnerabilities in Dmitry Sheiko SAPID Gallery 1.0 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the (1) root_path parameter to (a) usr/extensions/get_calendar.inc.php or the (2) GLOBALS[root_path] parameter to (b) usr/extensions/get_tree.inc.php.

Affected configurations

NVD

Node

dmitry_sheikosapid_galleryRange≤1.0

CPENameOperatorVersion
dmitry_sheiko:sapid_gallerydmitry sheiko sapid galleryle1.0

CPE	Name	Operator	Version
dmitry_sheiko:sapid_gallery	dmitry sheiko sapid gallery	le	1.0

References

secunia.com/advisories/21413

www.vupen.com/english/advisories/2006/3197

exchange.xforce.ibmcloud.com/vulnerabilities/28254

www.exploit-db.com/exploits/2130

5.1 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

8 High

AI Score

Confidence

Low

0.012 Low

EPSS

Percentile

85.0%

JSON

Related for CVE-2006-4065

nvd1 cvelist1