Lucene search

K
cveMitreCVE-2006-7136
HistoryMar 07, 2007 - 12:19 a.m.

CVE-2006-7136

2007-03-0700:19:00
mitre
web.nvd.nist.gov
32
cve-2006-7136
php
remote file inclusion
vulnerability
code execution
nvd

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.5

Confidence

Low

EPSS

0.054

Percentile

93.2%

Multiple PHP remote file inclusion vulnerabilities in PHP Poll Creator (phpPC) 1.04 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the relativer_pfad parameter to (1) poll.php, (2) poll_kommentar.php, and (3) poll_sm.php, different vectors and version than CVE-2005-1755.

Affected configurations

Nvd
Node
phppcphp_poll_creatorRange1.04
VendorProductVersionCPE
phppcphp_poll_creator*cpe:2.3:a:phppc:php_poll_creator:*:*:*:*:*:*:*:*

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.5

Confidence

Low

EPSS

0.054

Percentile

93.2%

Related for CVE-2006-7136