Lucene search
HistoryOct 10, 2006 - 4:06 a.m.
CVE-2006-5185
cve-2006-5185
eval injection
template.php
hamweather
remote code execution
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.8 High
AI Score
Confidence
Low
0.096 Low
EPSS
Percentile
94.8%
Eval injection vulnerability in Template.php in HAMweather 3.9.8.4 and earlier allows remote attackers to execute arbitrary code via a modified query string, which is supplied to an eval function call within the do_parse_code function.
Affected configurations
Node
hamweatherhamweatherRange≤3.9.8.4
ORhamweatherhamweatherMatch3.9.8.3
| CPE | Name | Operator | Version |
|---|---|---|---|
| hamweather:hamweather | hamweather | le | 3.9.8.4 |
| hamweather:hamweather | hamweather | eq | 3.9.8.3 |
Related
nvd
nvd
CVE-2006-5185
2006-10-10 04:06:00
nessus
nessus
HAMweather Template.php do_parse_code Function Arbitrary Code Execution
2006-10-04 00:00:00
cvelist
cvelist
CVE-2006-5185
2006-10-06 19:00:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.8 High
AI Score
Confidence
Low
0.096 Low
EPSS
Percentile
94.8%
Related for CVE-2006-5185