CVE-2006-1959

EPSS 16.89%
Veröffentlicht 21.04.2006 10:02:00
Zuletzt bearbeitet 03.04.2025 01:03:51
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

PHP remote file inclusion vulnerability in direct.php in ActualScripts ActualAnalyzer Lite 2.72 and earlier, Gold 7.63 and earlier, and Server 8.23 and earlier allows remote attackers to execute arbitrary code via a URL in the rf parameter.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 12

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Actualscripts ≫ Actualanalyzer Editionserver Version <= 8.23

Actualscripts ≫ Actualanalyzer Version2.72 Editionlite

Actualscripts ≫ Actualanalyzer Version7.63 Updategold

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	16.89%	0.947

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.5	10	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P

http://secunia.com/advisories/19743

http://securityreason.com/securityalert/742

http://securitytracker.com/id?1015967

http://www.osvdb.org/24778

http://www.securityfocus.com/archive/1/431351/100/0/threaded

http://www.securityfocus.com/archive/1/434562/100/0/threaded

http://www.securityfocus.com/bid/17597

http://www.vupen.com/english/advisories/2006/1430

https://exchange.xforce.ibmcloud.com/vulnerabilities/25893

https://nvd.nist.gov/vuln/detail/CVE-2006-1959

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2006-1959

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2006-1959

EUVD