Lucene search

[email protected]CVE-2006-4788

HistorySep 14, 2006 - 10:07 a.m.

CVE-2006-4788

2006-09-1410:07:00

[email protected]

web.nvd.nist.gov

cve-2006-4788

php

remote file inclusion

telekorn signkorn guestbook

nvd

vulnerability

register_globals

5.1 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

7.9 High

AI Score

Confidence

Low

0.016 Low

EPSS

Percentile

87.3%

JSON

PHP remote file inclusion vulnerability in includes/log.inc.php in Telekorn SignKorn Guestbook (SL) 1.3 and earlier, when register_globals is enabled and _SESSION[permission] parameter is set to “yes”, allows remote attackers to execute arbitrary PHP code via a URL in the dir_path parameter.

Affected configurations

NVD

Node

telekornsignkorn_guestbookRange≤1.3

telekornsignkorn_guestbookMatch1.1

telekornsignkorn_guestbookMatch1.2

CPENameOperatorVersion
telekorn:signkorn_guestbooktelekorn signkorn guestbookle1.3
telekorn:signkorn_guestbooktelekorn signkorn guestbookeq1.1
telekorn:signkorn_guestbooktelekorn signkorn guestbookeq1.2

CPE	Name	Operator	Version
telekorn:signkorn_guestbook	telekorn signkorn guestbook	le	1.3
telekorn:signkorn_guestbook	telekorn signkorn guestbook	eq	1.1
telekorn:signkorn_guestbook	telekorn signkorn guestbook	eq	1.2

References

secunia.com/advisories/21878

www.telekorn.com/forum/showthread.php?t=1427

www.vupen.com/english/advisories/2006/3570

exchange.xforce.ibmcloud.com/vulnerabilities/28888

www.exploit-db.com/exploits/2354

5.1 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

7.9 High

AI Score

Confidence

Low

0.016 Low

EPSS

Percentile

87.3%

JSON

Related for CVE-2006-4788

cvelist2 nvd2 cve1