Lucene search
HistoryAug 08, 2006 - 11:04 p.m.
CVE-2006-3584
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
6.7 Medium
AI Score
Confidence
Low
0.021 Low
EPSS
Percentile
89.3%
Dynamic variable evaluation vulnerability in index.php in Jetbox CMS 2.1 SR1 allows remote attackers to overwrite configuration variables via URL parameters, which are evaluated as PHP variable variables.
Affected configurations
Node
jetboxjetbox_cmsMatch2.1
ORjetboxjetbox_cmsMatch2.1_sr1
Related
cve
cve
CVE-2006-3584
2006-08-08 23:04:00
cvelist
cvelist
CVE-2006-3584
2006-08-08 23:00:00
securityvulns
securityvulns
[Full-disclosure] Secunia Research: Jetbox Multiple Vulnerabilities
2006-08-02 00:00:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
6.7 Medium
AI Score
Confidence
Low
0.021 Low
EPSS
Percentile
89.3%
Related for NVD:CVE-2006-3584