Lucene search

MitreCVE-2006-5306

HistoryOct 17, 2006 - 3:07 p.m.

CVE-2006-5306

2006-10-1715:07:00

CWE-94

mitre

web.nvd.nist.gov

cve

php

remote file inclusion

journals system

vulnerability

phpbb

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.7

Confidence

Low

EPSS

0.079

Percentile

94.3%

JSON

Multiple PHP remote file inclusion vulnerabilities in the Journals System module 1.0.2 (RC2) and earlier for phpBB allow remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter in (1) includes/journals_delete.php, (2) includes/journals_post.php, or (3) includes/journals_edit.php.

Affected configurations

Nvd

Node

phpbbjournals_system_moduleRange≤1.0.2_rc2

phpbbjournals_system_moduleMatch1.0.2

VendorProductVersionCPE
phpbbjournals_system_module*cpe:2.3:a:phpbb:journals_system_module:*:*:*:*:*:*:*:*
phpbbjournals_system_module1.0.2cpe:2.3:a:phpbb:journals_system_module:1.0.2:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
phpbb	journals_system_module	*	cpe:2.3:a:phpbb:journals_system_module::::::::
phpbb	journals_system_module	1.0.2	cpe:2.3:a:phpbb:journals_system_module:1.0.2:::::::*

References

secunia.com/advisories/22387

securityreason.com/securityalert/1731

securitytracker.com/id?1017058

www.securityfocus.com/archive/1/448443/100/0/threaded

www.securityfocus.com/bid/20484

www.vupen.com/english/advisories/2006/4029

exchange.xforce.ibmcloud.com/vulnerabilities/29491

www.exploit-db.com/exploits/2522

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.7

Confidence

Low

EPSS

0.079

Percentile

94.3%

JSON

Related for CVE-2006-5306