6.5

CVE-2006-4635

EPSS 1.3%
Veröffentlicht 08.09.2006 20:04:00
Zuletzt bearbeitet 16.06.2026 22:29:29
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

Unspecified vulnerability in MySource Classic 2.14.6, and possibly earlier, allows remote authenticated users, with superuser privileges, to inject arbitrary PHP code via unspecified vectors related to the Equation attribute in Web_Extensions - Notitia (I/II).  NOTE: due to lack of details, it is not clear whether this issue is file inclusion, static code injection, or another type of issue.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 8

NVD 1 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Squiz ≫ Mysource Classic Version <= 2.14.6

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.3%	0.667

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	6.5	8	6.4	AV:N/AC:L/Au:S/C:P/I:P/A:P

Es wurden noch keine Informationen zu CWE veröffentlicht.

http://classic.squiz.net/download/changelogs/change_log_2.14.8

http://secunia.com/advisories/21757

Vendor Advisory

http://www.securityfocus.com/bid/19868

http://www.vupen.com/english/advisories/2006/3477

https://exchange.xforce.ibmcloud.com/vulnerabilities/28768

https://nvd.nist.gov/vuln/detail/CVE-2006-4635

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2006-4635

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2006-4635

EUVD