Lucene search

MitreCVE-2006-6800

HistoryDec 28, 2006 - 9:28 p.m.

CVE-2006-6800

2006-12-2821:28:00

mitre

web.nvd.nist.gov

cve-2006-6800

php

remote file inclusion

event module 1.0

limbo cms

nvd

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

Confidence

Low

EPSS

0.186

Percentile

96.2%

JSON

PHP remote file inclusion in eventcal/mod_eventcal.php in the event module 1.0 for Limbo CMS allows remote attackers to execute arbitrary PHP code via a URL in the lm_absolute_path parameter.

Affected configurations

Nvd

Node

limbo_cmsevent_moduleMatch1.0

VendorProductVersionCPE
limbo_cmsevent_module1.0cpe:2.3:a:limbo_cms:event_module:1.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
limbo_cms	event_module	1.0	cpe:2.3:a:limbo_cms:event_module:1.0:::::::*

References

secunia.com/advisories/23527

securityreason.com/securityalert/2059

securitytracker.com/id?1017452

www.osvdb.org/31010

www.securityfocus.com/archive/1/455409/100/0/threaded

www.securityfocus.com/bid/21798

www.vupen.com/english/advisories/2006/5194

exchange.xforce.ibmcloud.com/vulnerabilities/31124

www.exploit-db.com/exploits/3028

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

Confidence

Low

EPSS

0.186

Percentile

96.2%

JSON

Related for CVE-2006-6800