Lucene search
HistoryDec 02, 2006 - 2:28 a.m.
CVE-2006-6232
cve
2006
6232
php
remote file inclusion
vulnerability
admin
index.php
dreamaccount 3.1
execute
arbitrary
code
url
path parameter
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.9 High
AI Score
Confidence
Low
0.156 Low
EPSS
Percentile
96.0%
PHP remote file inclusion vulnerability in admin/index.php in DreamAccount 3.1 allows remote attackers to execute arbitrary PHP code via a URL in the path parameter.
Affected configurations
Node
dreamcostdreamaccountMatch3.1
| CPE | Name | Operator | Version |
|---|---|---|---|
| dreamcost:dreamaccount | dreamcost dreamaccount | eq | 3.1 |
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.9 High
AI Score
Confidence
Low
0.156 Low
EPSS
Percentile
96.0%
Related for CVE-2006-6232