Lucene search

K
cveMitreCVE-2006-5441
HistoryOct 20, 2006 - 11:07 p.m.

CVE-2006-5441

2006-10-2023:07:00
mitre
web.nvd.nist.gov
32
cve-2006-5441
php
remote file inclusion
vulnerability
comdev web blogger 4.1
register_globals
nvd

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.3

Confidence

High

EPSS

0.012

Percentile

85.0%

PHP remote file inclusion vulnerability in adminfoot.php in Comdev Web Blogger 4.1, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the path[docroot] parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information.

Affected configurations

Nvd
Node
comdevcomdev_web_bloggerMatch4.1
VendorProductVersionCPE
comdevcomdev_web_blogger4.1cpe:2.3:a:comdev:comdev_web_blogger:4.1:*:*:*:*:*:*:*

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.3

Confidence

High

EPSS

0.012

Percentile

85.0%

Related for CVE-2006-5441