Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2006-6957
HistoryJan 29, 2007 - 4:28 p.m.

CVE-2006-6957

2007-01-2916:28:00
CWE-94
[email protected]
web.nvd.nist.gov
22
cve-2006-6957
php
remote file inclusion
vulnerability
docebo 3.0.3
register_globals
execution
arbitrary code
url
globals
where_framework
parameter

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.4 High

AI Score

Confidence

Low

0.022 Low

EPSS

Percentile

89.6%

JSON

PHP remote file inclusion vulnerability in addons/mod_media/body.php in Docebo 3.0.3 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[where_framework] parameter. NOTE: this issue might be resultant from a global overwrite vulnerability. This issue is similar to CVE-2006-2576 and CVE-2006-3107, but the vectors are different.

Affected configurations

NVD
Node
docebodoceboRange≤3.0.3
CPENameOperatorVersion
docebo:docebodocebole3.0.3

Related

cvelist 3
nvd 3
securityvulns 1
cve 2
prion 1
openvas 2
nessus 1
cvelist
cvelist
CVE-2006-6957
2007-01-29 16:00:00
CVE-2006-3107
2006-06-21 01:00:00
CVE-2006-2576
2006-05-24 23:00:00
nvd
nvd
CVE-2006-6957
2007-01-29 16:28:00
CVE-2006-3107
2006-06-21 01:02:00
CVE-2006-2576
2006-05-24 23:02:00
securityvulns
securityvulns
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
2006-05-23 00:00:00
cve
cve
CVE-2006-3107
2006-06-21 01:02:00
CVE-2006-2576
2006-05-24 23:02:00
prion
prion
Remote file inclusion
2006-05-24 23:02:00
openvas
openvas
Docebo GLOBALS Variable Overwrite Vulnerability
2008-08-22 00:00:00
Docebo GLOBALS Variable Overwrite Vulnerability
2008-08-22 00:00:00
nessus
nessus
Docebo GLOBALS Variable Overwrite Remote File Inclusion
2006-08-17 00:00:00

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.4 High

AI Score

Confidence

Low

0.022 Low

EPSS

Percentile

89.6%

JSON
Related for CVE-2006-6957
cvelist3nvd3securityvulns1cve2prion1openvas2nessus1