CVE-2006-2811
Summary
| CVE | CVE-2006-2811 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2006-06-05 17:02:00 UTC |
| Updated | 2018-10-18 16:43:00 UTC |
| Description | Multiple PHP remote file inclusion vulnerabilities in Cantico Ovidentia 5.8.0 allow remote attackers to execute arbitrary PHP code via a URL in the babInstallPath parameter in (1) index.php, (2) topman.php, (3) approb.php, (4) vacadmb.php, (5) vacadma.php, (6) vacadm.php, (7) statart.php, (8) search.php, (9) posts.php, (10) options.php, (11) login.php, (12) frchart.php, (13) flbchart.php, (14) fileman.php, (15) faq.php, (16) event.php, (17) directory.php, (18) articles.php, (19) artedit.php, (20) calday.php, and additional unspecified PHP scripts. NOTE: the utilit.php vector is already covered by CVE-2005-1964. |
Risk And Classification
Problem Types: NVD-CWE-Other
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| 27220 | OSVDB | www.osvdb.org | |
| IBM X-Force Exchange | XF | exchange.xforce.ibmcloud.com | |
| 27212 | OSVDB | www.osvdb.org | |
| 27227 | OSVDB | www.osvdb.org | |
| 27215 | OSVDB | www.osvdb.org | |
| SecurityFocus | BUGTRAQ | www.securityfocus.com | |
| 27229 | OSVDB | www.osvdb.org | |
| 27219 | OSVDB | www.osvdb.org | |
| 27222 | OSVDB | www.osvdb.org | |
| 27225 | OSVDB | www.osvdb.org | |
| 27217 | OSVDB | www.osvdb.org | |
| 27228 | OSVDB | www.osvdb.org | |
| multiple file inclusion exploits in ovidentia v5.8.0 - CXSecurity.com | SREASON | securityreason.com | |
| 27209 | OSVDB | www.osvdb.org | |
| 27226 | OSVDB | www.osvdb.org | |
| 27214 | OSVDB | www.osvdb.org | |
| 27221 | OSVDB | www.osvdb.org | |
| SecurityFocus | BUGTRAQ | www.securityfocus.com | |
| 27213 | OSVDB | www.osvdb.org | |
| 27224 | OSVDB | www.osvdb.org | |
| 27216 | OSVDB | www.osvdb.org | |
| Ovidentia Multiple Remote File Include Vulnerabilities | BID | www.securityfocus.com | |
| 27223 | OSVDB | www.osvdb.org | |
| 27211 | OSVDB | www.osvdb.org | |
| 27218 | OSVDB | www.osvdb.org | |
| SecurityFocus | BUGTRAQ | www.securityfocus.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.