Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2006-3421
HistoryJul 07, 2006 - 12:05 a.m.

CVE-2006-3421

2006-07-0700:05:00
[email protected]
web.nvd.nist.gov
2

CVSS2

5.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

AI Score

7.5

Confidence

Low

EPSS

0.223

Percentile

96.5%

JSON

PHP remote file inclusion vulnerability in SmartSiteCMS 1.0 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via the root parameter in (1) comment.php, (2) admin/comedit.php, (3) admin/test.php, (4) admin/index.php, and (5) admin/include/inc_adminfoot.php, a different set of vectors than CVE-2006-3162.

Affected configurations

Nvd
Node
smartsitecmssmartsitecmsRange≤1.0
VendorProductVersionCPE
smartsitecmssmartsitecms*cpe:2.3:a:smartsitecms:smartsitecms:*:*:*:*:*:*:*:*

Related

exploitdb 2
cve 2
cvelist 2
nvd 1
exploitdb
exploitdb
SmartSite CMS 1.0 - 'root' Remote File Inclusion
2006-06-20 00:00:00
SmartSite CMS 1.0 - 'root' Multiple Remote File Inclusions
2006-07-01 00:00:00
cve
cve
CVE-2006-3421
2006-07-07 00:05:00
CVE-2006-3162
2006-06-22 22:06:00
cvelist
cvelist
CVE-2006-3421
2006-07-07 00:00:00
CVE-2006-3162
2006-06-22 22:00:00
nvd
nvd
CVE-2006-3162
2006-06-22 22:06:00

CVSS2

5.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

AI Score

7.5

Confidence

Low

EPSS

0.223

Percentile

96.5%

JSON
Related for NVD:CVE-2006-3421
exploitdb2cve2cvelist2nvd1