Lucene search

K
cveMitreCVE-2006-5518
HistoryOct 26, 2006 - 4:07 p.m.

CVE-2006-5518

2006-10-2616:07:00
mitre
web.nvd.nist.gov
22
cve-2006-5518
php
remote file inclusion
rssonate
vulnerability
nvd

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8

Confidence

Low

EPSS

0.144

Percentile

95.8%

Multiple PHP remote file inclusion vulnerabilities in Christopher Fowler (Rhode Island) RSSonate allow remote attackers to execute arbitrary PHP code via a URL in the PROJECT_ROOT parameter to (1) xml2rss.php, (2) config_local.php, (3) rssonate.php, and (4) sql2xml.php in Src/getFeed/inc/.

Affected configurations

Nvd
Node
christopher_fowlerrssonate
VendorProductVersionCPE
christopher_fowlerrssonate*cpe:2.3:a:christopher_fowler:rssonate:*:*:*:*:*:*:*:*

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8

Confidence

Low

EPSS

0.144

Percentile

95.8%

Related for CVE-2006-5518