CVE-2006-2811in critical feed8 exploits
Multiple PHP remote file inclusion vulnerabilities in Cantico Ovidentia 5.8.0 allow remote attackers to execute arbitrary PHP code via a UR…
Published 20 y ago · modified 4 mo ago · JSON
Summary
Multiple PHP remote file inclusion vulnerabilities in Cantico Ovidentia 5.8.0 allow remote attackers to execute arbitrary PHP code via a URL in the babInstallPath parameter in (1) index.php, (2) topman.php, (3) approb.php, (4) vacadmb.php, (5) vacadma.php, (6) vacadm.php, (7) statart.php, (8) search.php, (9) posts.php, (10) options.php, (11) login.php, (12) frchart.php, (13) flbchart.php, (14) fileman.php, (15) faq.php, (16) event.php, (17) directory.php, (18) articles.php, (19) artedit.php, (20) calday.php, and additional unspecified PHP scripts. NOTE: the utilit.php vector is already covered by CVE-2005-1964.
Exploit prediction (EPSS)
17.39% probability of exploitation in the next 30 days, higher than 97% of all scored CVEs.
Exploits and detections
- EDB-27956 Ovidentia 5.6.x/5.8 - 'options.php?babInstallPath' Remote File Inclusion · webapps · 2006-06-02
- EDB-27955 Ovidentia 5.6.x/5.8 - 'posts.php?babInstallPath' Remote File Inclusion · webapps · 2006-06-02
- EDB-27954 Ovidentia 5.6.x/5.8 - 'search.php?babInstallPath' Remote File Inclusion · webapps · 2006-06-02
- EDB-27953 Ovidentia 5.6.x/5.8 - 'statart.php?babInstallPath' Remote File Inclusion · webapps · 2006-06-02
- EDB-27952 Ovidentia 5.6.x/5.8 - 'vacadm.php?babInstallPath' Remote File Inclusion · webapps · 2006-06-02
- EDB-27951 Ovidentia 5.6.x/5.8 - 'vacadma.php?babInstallPath' Remote File Inclusion · webapps · 2006-06-02
- EDB-27950 Ovidentia 5.6.x/5.8 - 'vacadmb.php?babInstallPath' Remote File Inclusion · webapps · 2006-06-02
- EDB-27949 Ovidentia 5.6.x/5.8 - 'approb.php?babInstallPath' Remote File Inclusion · webapps · 2006-06-02
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 2.0 | 7.5 | AV:N/AC:L/Au:N/C:P/I:P/A:P |
References
- osvdb.org /27223 · vdb-entry, x_refsource_OSVDB, x_transferred
- exchange.xforce.ibmcloud.com /vulnerabilities/26981 · vdb-entry, x_refsource_XF, x_transferred
- osvdb.org /27228 · vdb-entry, x_refsource_OSVDB, x_transferred
- osvdb.org /27215 · vdb-entry, x_refsource_OSVDB, x_transferred
- osvdb.org /27224 · vdb-entry, x_refsource_OSVDB, x_transferred
- osvdb.org /27214 · vdb-entry, x_refsource_OSVDB, x_transferred
- securityreason.com /securityalert/1033 · third-party-advisory, x_refsource_SREASON, x_transferred
- osvdb.org /27216 · vdb-entry, x_refsource_OSVDB, x_transferred
- osvdb.org /27212 · vdb-entry, x_refsource_OSVDB, x_transferred
- osvdb.org /27222 · vdb-entry, x_refsource_OSVDB, x_transferred
- osvdb.org /27221 · vdb-entry, x_refsource_OSVDB, x_transferred
- osvdb.org /27226 · vdb-entry, x_refsource_OSVDB, x_transferred
- osvdb.org /27220 · vdb-entry, x_refsource_OSVDB, x_transferred
- osvdb.org /27225 · vdb-entry, x_refsource_OSVDB, x_transferred
- osvdb.org /27211 · vdb-entry, x_refsource_OSVDB, x_transferred
- osvdb.org /27229 · vdb-entry, x_refsource_OSVDB, x_transferred
- securityfocus.com /bid/18232 · vdb-entry, x_refsource_BID, x_transferred
- securityfocus.com /archive/1/456893/100/200/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
- osvdb.org /27209 · vdb-entry, x_refsource_OSVDB, x_transferred
- osvdb.org /27218 · vdb-entry, x_refsource_OSVDB, x_transferred
- osvdb.org /27217 · vdb-entry, x_refsource_OSVDB, x_transferred
- osvdb.org /27227 · vdb-entry, x_refsource_OSVDB, x_transferred
- osvdb.org /27213 · vdb-entry, x_refsource_OSVDB, x_transferred
- securityfocus.com /archive/1/435590/100/0/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
- osvdb.org /27219 · vdb-entry, x_refsource_OSVDB, x_transferred
- securityfocus.com /archive/1/459572/100/0/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
Sources
- CVE List: CVE-2006-2811
- NVD: CVE-2006-2811
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.