7.5

CVE-2006-2005

Exploit
Eval injection vulnerability in index.php in ClanSys 1.1 allows remote attackers to execute arbitrary PHP code via PHP code in the page parameter, as demonstrated by using an "include" statement that is injected into the eval statement.  NOTE: this issue has been described as file inclusion by some sources, but that is just one attack; the primary vulnerability is eval injection.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Clansys ≫ Clansys Version1.1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.26% 0.867
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://securityreason.com/securityalert/782
http://securitytracker.com/id?1015988
Exploit
http://www.nukedx.com/?getxpl=29
Exploit
http://www.osvdb.org/25083
http://www.securityfocus.com/archive/1/431873/100/0/threaded
http://www.securityfocus.com/bid/17660
https://exchange.xforce.ibmcloud.com/vulnerabilities/25976