Lucene search

[email protected]CVE-2006-5256

HistoryOct 12, 2006 - 10:07 p.m.

CVE-2006-5256

2006-10-1222:07:00

[email protected]

web.nvd.nist.gov

cve-2006-5256

php

remote file inclusion

claroline 1.8.0

security vulnerability

nvd

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.9 High

AI Score

Confidence

Low

0.154 Low

EPSS

Percentile

95.9%

JSON

PHP remote file inclusion vulnerability in claroline/inc/lib/import.lib.php in Claroline 1.8.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the includePath parameter.

Affected configurations

NVD

Node

clarolineclarolineRange≤1.8.0

clarolineclarolineMatch1.2

clarolineclarolineMatch1.3

clarolineclarolineMatch1.4

clarolineclarolineMatch1.5

clarolineclarolineMatch1.5.3

clarolineclarolineMatch1.5.4

clarolineclarolineMatch1.6

clarolineclarolineMatch1.6_beta

clarolineclarolineMatch1.6_rc1

clarolineclarolineMatch1.7

clarolineclarolineMatch1.7.1

clarolineclarolineMatch1.7.2

clarolineclarolineMatch1.7.3

clarolineclarolineMatch1.7.4

clarolineclarolineMatch1.7.5

clarolineclarolineMatch1.7.6

clarolineclarolineMatch1.7.7

CPENameOperatorVersion
claroline:clarolineclarolinele1.8.0
claroline:clarolineclarolineeq1.2
claroline:clarolineclarolineeq1.3
claroline:clarolineclarolineeq1.4
claroline:clarolineclarolineeq1.5
claroline:clarolineclarolineeq1.5.3
claroline:clarolineclarolineeq1.5.4
claroline:clarolineclarolineeq1.6
claroline:clarolineclarolineeq1.6_beta
claroline:clarolineclarolineeq1.6_rc1

CPE	Name	Operator	Version
claroline:claroline	claroline	le	1.8.0
claroline:claroline	claroline	eq	1.2
claroline:claroline	claroline	eq	1.3
claroline:claroline	claroline	eq	1.4
claroline:claroline	claroline	eq	1.5
claroline:claroline	claroline	eq	1.5.3
claroline:claroline	claroline	eq	1.5.4
claroline:claroline	claroline	eq	1.6
claroline:claroline	claroline	eq	1.6_beta
claroline:claroline	claroline	eq	1.6_rc1

Rows per page:

1-10 of 181

References

secunia.com/advisories/22364

securityreason.com/securityalert/1719

securitytracker.com/id?1017044

www.securityfocus.com/archive/1/448174/100/0/threaded

www.securityfocus.com/bid/20444

www.vupen.com/english/advisories/2006/3996

exchange.xforce.ibmcloud.com/vulnerabilities/29426

www.exploit-db.com/exploits/2510

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.9 High

AI Score

Confidence

Low

0.154 Low

EPSS

Percentile

95.9%

JSON

Related for CVE-2006-5256

cvelist1 nvd1