Lucene search
HistoryOct 26, 2006 - 4:07 p.m.
CVE-2006-5522
cve
2006
5522
php
remote file inclusion
johannes erdfelt kawf
security vulnerability.
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8 High
AI Score
Confidence
Low
0.051 Low
EPSS
Percentile
93.0%
Multiple PHP remote file inclusion vulnerabilities in Johannes Erdfelt Kawf 1.0 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the config parameter in (1) main.php or (2) user/account/main.php.
Affected configurations
Node
johannes_erdfeltkawfRange≤1.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| johannes_erdfelt:kawf | johannes erdfelt kawf | le | 1.0 |
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8 High
AI Score
Confidence
Low
0.051 Low
EPSS
Percentile
93.0%
Related for CVE-2006-5522