Lucene search
MitreCVE-2006-5893HistoryNov 14, 2006 - 10:07 p.m.
CVE-2006-5893
2006-11-1422:07:00
mitre
web.nvd.nist.gov
20
cve-2006-5893
php
remote file inclusion
iwonder designs storystream
vulnerability
nvd
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
8
Confidence
Low
EPSS
0.144
Percentile
95.8%
Multiple PHP remote file inclusion vulnerabilities in iWonder Designs Storystream 0.4.0.0 allow remote attackers to execute arbitrary PHP code via a URL in the baseDir parameter to (1) mysql.php and (2) mysqli.php in include/classes/pear/DB/.
Affected configurations
Node
iwonder_designsstorystreamMatch0.4.0.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| iwonder_designs | storystream | 0.4.0.0 | cpe:2.3:a:iwonder_designs:storystream:0.4.0.0:*:*:*:*:*:*:* |
References
Related
exploitdb
exploitdb
StoryStream 4.0 - 'baseDir' Remote File Inclusion
2006-11-12 00:00:00
cvelist
cvelist
CVE-2006-5893
2006-11-14 22:00:00
nvd
nvd
CVE-2006-5893
2006-11-14 22:07:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
8
Confidence
Low
EPSS
0.144
Percentile
95.8%
Related for CVE-2006-5893