vulnwire
7.5high

CVE-2006-0147in critical feed1 exploit

Dynamic code evaluation vulnerability in tests/tmssql.php test script in ADOdb for PHP before 4.70, as used in multiple products including…

Published 20 y ago · modified 4 mo ago · JSON

CVSS
7.5
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
13.1%
percentile 96%
Public exploits
1
Exploit-DB

Dynamic code evaluation vulnerability in tests/tmssql.php test script in ADOdb for PHP before 4.70, as used in multiple products including (1) Mantis, (2) PostNuke, (3) Moodle, (4) Cacti, (5) Xaraya, (6) PhpOpenChat, possibly (7) MAXdev MD-Pro, and (8) Simplog, allows remote attackers to execute arbitrary PHP functions via the do parameter, which is saved in a variable that is then executed as a function, as demonstrated using phpinfo.

Exploit prediction (EPSS)

13.06% probability of exploitation in the next 30 days, higher than 96% of all scored CVEs.

Exploits and detections

  • EDB-1663 Simplog 0.9.2 - 's' Remote Command Execution · webapps · 2006-04-11

CVSS scores

Assigned byVersionScoreVector
NVD2.07.5AV:N/AC:L/Au:N/C:P/I:P/A:P

References

  • secunia.com /advisories/19590 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • secunia.com /advisories/18267 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • secunia.com /advisories/18254 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • secunia.com /advisories/19555 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • debian.org /security/2006/dsa-1029 · vendor-advisory, x_refsource_DEBIAN, x_transferred
  • exchange.xforce.ibmcloud.com /vulnerabilities/24052 · vdb-entry, x_refsource_XF, x_transferred
  • secunia.com /advisories/19628 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • securityfocus.com /archive/1/430448/100/0/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • debian.org /security/2006/dsa-1030 · vendor-advisory, x_refsource_DEBIAN, x_transferred
  • vupen.com /english/advisories/2006/1305 · vdb-entry, x_refsource_VUPEN, x_transferred
  • secunia.com /advisories/18276 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • secunia.com /advisories/19600 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • exploit-db.com /exploits/1663 · exploit, x_refsource_EXPLOIT-DB, x_transferred
  • vupen.com /english/advisories/2006/0103 · vdb-entry, x_refsource_VUPEN, x_transferred
  • secunia.com /secunia_research/2005-64/advisory/ · x_refsource_MISC, x_transferred
  • securityfocus.com /archive/1/430743/100/0/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • secunia.com /advisories/19591 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • secunia.com /advisories/17418 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • secunia.com /advisories/19691 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • vupen.com /english/advisories/2006/0102 · vdb-entry, x_refsource_VUPEN, x_transferred
  • vupen.com /english/advisories/2006/0101 · vdb-entry, x_refsource_VUPEN, x_transferred
  • secunia.com /advisories/18233 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • retrogod.altervista.org /simplog_092_incl_xpl.html · x_refsource_MISC, x_transferred
  • vupen.com /english/advisories/2006/1332 · vdb-entry, x_refsource_VUPEN, x_transferred
  • osvdb.org /22291 · vdb-entry, x_refsource_OSVDB, x_transferred
  • debian.org /security/2006/dsa-1031 · vendor-advisory, x_refsource_DEBIAN, x_transferred
  • retrogod.altervista.org /phpopenchat_30x_sql_xpl.html · x_refsource_MISC, x_transferred
  • vupen.com /english/advisories/2006/0104 · vdb-entry, x_refsource_VUPEN, x_transferred
  • secunia.com /advisories/18260 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • gentoo.org /security/en/glsa/glsa-200604-07.xml · vendor-advisory, x_refsource_GENTOO, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.