Lucene search
MitreCVE-2006-5438HistoryOct 20, 2006 - 11:07 p.m.
CVE-2006-5438
2006-10-2023:07:00
mitre
web.nvd.nist.gov
23
cve-2006-5438
php
remote file inclusion
adminfoot.php
comdev forum 4.1
security vulnerability
nvd
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.6
Confidence
High
EPSS
0.012
Percentile
85.0%
PHP remote file inclusion vulnerability in adminfoot.php in Comdev Forum 4.1, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the path[docroot] parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information.
Affected configurations
Node
comdevcomdev_forumMatch4.1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| comdev | comdev_forum | 4.1 | cpe:2.3:a:comdev:comdev_forum:4.1:*:*:*:*:*:*:* |
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.6
Confidence
High
EPSS
0.012
Percentile
85.0%
Related for CVE-2006-5438