Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2006-4645
HistorySep 08, 2006 - 9:04 p.m.

CVE-2006-4645

2006-09-0821:04:00
mitre
web.nvd.nist.gov
31
cve-2006-4645
php
remote file inclusion
akarru
social bookmarking engine

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.7

Confidence

High

EPSS

0.168

Percentile

96.1%

JSON

PHP remote file inclusion vulnerability in akarru.gui/main_content.php in Akarru Social BookMarking Engine 0.4.3.34 and earlier, and possibly 0.4.4.120, allows remote attackers to execute arbitrary PHP code via a URL in the bm_content parameter.

Affected configurations

Nvd
Node
akarrusocial_bookmarking_engineMatch0.4.3.2
OR
akarrusocial_bookmarking_engineMatch0.4.3.3
OR
akarrusocial_bookmarking_engineMatch0.4.3.34
OR
akarrusocial_bookmarking_engineMatch0.4.4.120
VendorProductVersionCPE
akarrusocial_bookmarking_engine0.4.3.2cpe:2.3:a:akarru:social_bookmarking_engine:0.4.3.2:*:*:*:*:*:*:*
akarrusocial_bookmarking_engine0.4.3.3cpe:2.3:a:akarru:social_bookmarking_engine:0.4.3.3:*:*:*:*:*:*:*
akarrusocial_bookmarking_engine0.4.3.34cpe:2.3:a:akarru:social_bookmarking_engine:0.4.3.34:*:*:*:*:*:*:*
akarrusocial_bookmarking_engine0.4.4.120cpe:2.3:a:akarru:social_bookmarking_engine:0.4.4.120:*:*:*:*:*:*:*

Related

exploitdb 1
checkpoint_advisories 1
cvelist 1
nvd 1
exploitdb
exploitdb
Akarru 0.4.3.34 - 'bm_content' Remote File Inclusion
2006-09-06 00:00:00
checkpoint_advisories
checkpoint_advisories
Akarru main_content.php bm_content Parameter PHP Code Execution - Ver2 (CVE-2006-4645)
2014-03-31 00:00:00
cvelist
cvelist
CVE-2006-4645
2006-09-08 21:00:00
nvd
nvd
CVE-2006-4645
2006-09-08 21:04:00

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.7

Confidence

High

EPSS

0.168

Percentile

96.1%

JSON
Related for CVE-2006-4645
exploitdb1checkpoint_advisories1cvelist1nvd1