CVE-2006-3584

2006-08-0823:00:00

flexera

www.cve.org

6.7 Medium

AI Score

Confidence

Low

0.021 Low

EPSS

Percentile

89.3%

JSON

Dynamic variable evaluation vulnerability in index.php in Jetbox CMS 2.1 SR1 allows remote attackers to overwrite configuration variables via URL parameters, which are evaluated as PHP variable variables.

References

secunia.com/advisories/20889

secunia.com/secunia_research/2006-57/advisory/

securityreason.com/securityalert/1339

www.securityfocus.com/archive/1/441980/100/0/threaded

www.securityfocus.com/bid/19303