CVE-2006-4311
Summary
| CVE | CVE-2006-4311 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2006-08-23 19:04:00 UTC |
| Updated | 2023-11-07 01:59:00 UTC |
| Description | PHP remote file inclusion vulnerability in Sonium Enterprise Adressbook 0.2 allows remote attackers to execute arbitrary PHP code via the folder parameter in multiple files in the plugins directory, as demonstrated by plugins/1_Adressbuch/delete.php. |
Risk And Classification
Problem Types: NVD-CWE-Other
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Sonium | Enterprise Adressbook | 0.2 | All | All | All |
| Application | Sonium | Enterprise Adressbook | 0.2 | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Sonium Enterprise Adressbook "folder" File Inclusion Vulnerabilities - Advisories - Secunia | SECUNIA | secunia.com | Vendor Advisory |
| SecurityFocus | BUGTRAQ | www.securityfocus.com | |
| Webmail : Solution de messagerie professionnelle - OVHcloud- OVH | VUPEN | www.vupen.com | |
| Sonium Enterprise Addressbook Multiple Remote File Include Vulnerabilities | BID | www.securityfocus.com | |
| IBM X-Force Exchange | XF | exchange.xforce.ibmcloud.com | |
| 404 Not Found | www.bb-pcsecurity.de | ||
| 404 Not Found | MISC | www.bb-pcsecurity.de | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.