7.5
CVE-2006-6285
- EPSS 2.71%
- Veröffentlicht 04.12.2006 11:28:00
- Zuletzt bearbeitet 16.06.2026 22:32:50
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginPHP remote file inclusion vulnerability in index.php in Kai Blankenhorn Bitfolge simple and nice index file (aka snif) 1.5.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the externalConfig parameter. NOTE: CVE and other third parties dispute this vulnerability because $externalConfig is defined before use
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Kai Blankenhorn Bitfolge ≫ Simple And Nice Index File Version <= 1.5.2
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 2.71% | 0.84 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 10 | 6.4 |
AV:N/AC:L/Au:N/C:P/I:P/A:P
|
http://attrition.org/pipermail/vim/2006-December/001159.html
http://www.attrition.org/pipermail/vim/2006-December/001161.html
http://www.securityfocus.com/bid/21378
https://exchange.xforce.ibmcloud.com/vulnerabilities/30613
https://www.exploit-db.com/exploits/2868