{"api_version":"1","generated_at":"2026-07-23T12:44:55+00:00","cve":"CVE-2006-5020","urls":{"html":"https://cve.report/CVE-2006-5020","api":"https://cve.report/api/cve/CVE-2006-5020.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2006-5020","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2006-5020"},"summary":{"title":"CVE-2006-5020","description":"Multiple PHP remote file inclusion vulnerabilities in SolidState 0.4 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the base_path parameter in manager/pages/ scripts including (1) AccountsPage.class.php, (2) AddInvoicePage.class.php, (3) AddIPAddressPage.class.php, (4) AddPaymentPage.class.php, (5) AddTaxRulePage.class.php, (6) AssignDomainPage.class.php, (7) AssignHostingPage.class.php, (8) AssignProductPage.class.php, (9) BillingPage.class.php, (10) BillingPaymentPage.class.php, (11) BrowseAccountsPage.class.php, (12) BrowseInvoicesPage.class.php, (13) ConfigureEditUserPage.class.php, (14) ConfigureNewUserPage.class.php, (15) ConfigureNewUserReceiptPage.class.php, (16) ConfigureUsersPage.class.php, (17) DeleteAccountPage.class.php, (18) DeleteDomainServicePage.class.php, (19) DeleteHostingServicePage.class.php, (20) DeleteInvoicePage.class.php, (21) DeleteProductPage.class.php, (22) DeleteServerPage.class.php, (23) DomainServicesPage.class.php, (24) DomainsPage.class.php, (25) EditAccountPage.class.php, (26) EditDomainPage.class.php, (27) EditDomainServicePage.class.php, (28) EditHostingServicePage.class.php, (29) EditPaymentPage.class.php, (30) EditProductPage.class.php, (31) EditServerPage.class.php, (32) EmailInvoicePage.class.php, (33) ExecuteOrderPage.class.php, (34) ExpiredDomainsPage.class.php, (35) FulfilledOrdersPage.class.php, (36) GenerateInvoicesPage.class.php, (37) HomePage.class.php, (38) InactiveAccountsPage.class.php, (39) IPManagerPage.class.php, (40) LoginPage.class.php, (41) LogPage.class.php, (42) ModulesPage.class.php, (43) NewAccountPage.class.php, (44) NewDomainServicePage.class.php, (45) NewProductPage.class.php, (46) OutstandingInvoicesPage.class.php, (47) PendingAccountsPage.class.php, (48) PendingOrdersPage.class.php, (49) PrintInvoicePage.class.php, (50) ProductsPage.class.php, (51) RegisterDomainPage.class.php, (52) RegisteredDomainsPage.class.php, (53) ServersPage.class.php, (54) ServicesHostingServicesPage.class.php, (55) ServicesNewHostingPage.class.php, (56) ServicesPage.class.php, (57) ServicesWebHostingPage.class.php, (58) SettingsPage.class.php, (59) TaxesPage.class.php, (60) TransferDomainPage.class.php, (61) ViewAccountPage.class.php, (62) ViewDomainServicePage.class.php, (63) ViewHostingServicePage.class.php, (64) ViewInvoicePage.class.php, (65) ViewLogMessagePage.class.php, (66) ViewOrderPage.class.php, (67) ViewProductPage.class.php, (68) ViewServerPage.class.php, (69) WelcomeEmailPage.class.php; and (70) modules/RegistrarModule.class.php, (71) modules/SolidStateModule.class.php, (72) modules/authorizeaim/authorizeaim.class.php, and (73) modules/authorizeaim/pages/AAIMConfigPage.class.php.","state":"PUBLISHED","assigner":"mitre","published_at":"2006-09-27 23:07:00","updated_at":"2026-04-23 00:35:47"},"problem_types":["NVD-CWE-Other","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"7.5","severity":"","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"http://www.osvdb.org/31200","name":"http://www.osvdb.org/31200","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.osvdb.org/31191","name":"http://www.osvdb.org/31191","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.securityfocus.com/bid/21934","name":"http://www.securityfocus.com/bid/21934","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SolidState Multiple Remote File Include Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://www.osvdb.org/31106","name":"http://www.osvdb.org/31106","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.osvdb.org/31137","name":"http://www.osvdb.org/31137","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.osvdb.org/31143","name":"http://www.osvdb.org/31143","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.osvdb.org/31121","name":"http://www.osvdb.org/31121","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://attrition.org/pipermail/vim/2007-January/001210.html","name":"http://attrition.org/pipermail/vim/2007-January/001210.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"[VIM] vendor ack: SolidState RFI","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.osvdb.org/31110","name":"http://www.osvdb.org/31110","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.osvdb.org/31141","name":"http://www.osvdb.org/31141","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.osvdb.org/31135","name":"http://www.osvdb.org/31135","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.osvdb.org/31104","name":"http://www.osvdb.org/31104","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.osvdb.org/31198","name":"http://www.osvdb.org/31198","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.osvdb.org/31112","name":"http://www.osvdb.org/31112","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.osvdb.org/31123","name":"http://www.osvdb.org/31123","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.osvdb.org/31202","name":"http://www.osvdb.org/31202","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.osvdb.org/31193","name":"http://www.osvdb.org/31193","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.osvdb.org/31119","name":"http://www.osvdb.org/31119","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.osvdb.org/31128","name":"http://www.osvdb.org/31128","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.osvdb.org/31116","name":"http://www.osvdb.org/31116","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.osvdb.org/31127","name":"http://www.osvdb.org/31127","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.osvdb.org/31145","name":"http://www.osvdb.org/31145","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.osvdb.org/31131","name":"http://www.osvdb.org/31131","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.osvdb.org/31100","name":"http://www.osvdb.org/31100","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.osvdb.org/31099","name":"http://www.osvdb.org/31099","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.osvdb.org/31197","name":"http://www.osvdb.org/31197","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.osvdb.org/31109","name":"http://www.osvdb.org/31109","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.osvdb.org/31138","name":"http://www.osvdb.org/31138","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.osvdb.org/31125","name":"http://www.osvdb.org/31125","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.osvdb.org/31114","name":"http://www.osvdb.org/31114","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.osvdb.org/31133","name":"http://www.osvdb.org/31133","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.osvdb.org/31147","name":"http://www.osvdb.org/31147","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.osvdb.org/31115","name":"http://www.osvdb.org/31115","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.solid-state.org/index.php?name=PNphpBB2&file=portal&article=1","name":"http://www.solid-state.org/index.php?name=PNphpBB2&file=portal&article=1","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"www.solid-state.org","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.osvdb.org/31124","name":"http://www.osvdb.org/31124","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.osvdb.org/31146","name":"http://www.osvdb.org/31146","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.osvdb.org/31132","name":"http://www.osvdb.org/31132","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.osvdb.org/31139","name":"http://www.osvdb.org/31139","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.osvdb.org/31194","name":"http://www.osvdb.org/31194","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.osvdb.org/31108","name":"http://www.osvdb.org/31108","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.osvdb.org/31098","name":"http://www.osvdb.org/31098","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.osvdb.org/31126","name":"http://www.osvdb.org/31126","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.osvdb.org/31117","name":"http://www.osvdb.org/31117","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.osvdb.org/31130","name":"http://www.osvdb.org/31130","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.osvdb.org/31144","name":"http://www.osvdb.org/31144","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.osvdb.org/31192","name":"http://www.osvdb.org/31192","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.osvdb.org/31203","name":"http://www.osvdb.org/31203","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/29095","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/29095","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.osvdb.org/31129","name":"http://www.osvdb.org/31129","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.osvdb.org/31118","name":"http://www.osvdb.org/31118","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.osvdb.org/31199","name":"http://www.osvdb.org/31199","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.osvdb.org/31105","name":"http://www.osvdb.org/31105","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.osvdb.org/31097","name":"http://www.osvdb.org/31097","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"https://www.exploit-db.com/exploits/2413","name":"https://www.exploit-db.com/exploits/2413","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SolidState <= 0.4 Multiple Remote File Include Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.osvdb.org/31134","name":"http://www.osvdb.org/31134","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.osvdb.org/31122","name":"http://www.osvdb.org/31122","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.osvdb.org/31113","name":"http://www.osvdb.org/31113","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.osvdb.org/31142","name":"http://www.osvdb.org/31142","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.osvdb.org/31136","name":"http://www.osvdb.org/31136","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.osvdb.org/31107","name":"http://www.osvdb.org/31107","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.osvdb.org/31111","name":"http://www.osvdb.org/31111","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.osvdb.org/31120","name":"http://www.osvdb.org/31120","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.osvdb.org/31190","name":"http://www.osvdb.org/31190","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.osvdb.org/31201","name":"http://www.osvdb.org/31201","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2006-5020","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2006-5020","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2006","cve_id":"5020","vulnerable":"1","versionEndIncluding":"0.4","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"solidstate","cpe5":"solidstate","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T19:32:22.868Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"solidstate-basepath-file-include(29095)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/29095"},{"name":"31120","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/31120"},{"name":"31147","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/31147"},{"name":"31141","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/31141"},{"name":"31139","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/31139"},{"name":"31192","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/31192"},{"name":"31106","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/31106"},{"name":"31135","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/31135"},{"name":"31117","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/31117"},{"name":"20070106 vendor ack: SolidState RFI","tags":["mailing-list","x_refsource_VIM","x_transferred"],"url":"http://attrition.org/pipermail/vim/2007-January/001210.html"},{"name":"31144","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/31144"},{"name":"21934","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/21934"},{"name":"31100","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/31100"},{"name":"31112","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/31112"},{"name":"31109","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/31109"},{"name":"31193","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/31193"},{"name":"31115","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/31115"},{"name":"31131","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/31131"},{"name":"31203","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/31203"},{"name":"31194","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/31194"},{"name":"31146","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/31146"},{"name":"31191","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/31191"},{"name":"31105","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/31105"},{"name":"31119","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/31119"},{"name":"31197","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/31197"},{"name":"31136","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/31136"},{"name":"31116","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/31116"},{"name":"31099","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/31099"},{"name":"31114","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/31114"},{"name":"31134","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/31134"},{"name":"31190","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/31190"},{"name":"31145","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/31145"},{"name":"31122","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/31122"},{"name":"31111","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/31111"},{"name":"31104","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/31104"},{"name":"31113","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/31113"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.solid-state.org/index.php?name=PNphpBB2&file=portal&article=1"},{"name":"31199","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/31199"},{"name":"31128","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/31128"},{"name":"2413","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred"],"url":"https://www.exploit-db.com/exploits/2413"},{"name":"31125","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/31125"},{"name":"31107","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/31107"},{"name":"31098","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/31098"},{"name":"31137","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/31137"},{"name":"31200","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/31200"},{"name":"31143","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/31143"},{"name":"31198","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/31198"},{"name":"31123","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/31123"},{"name":"31126","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/31126"},{"name":"31124","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/31124"},{"name":"31201","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/31201"},{"name":"31097","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/31097"},{"name":"31110","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/31110"},{"name":"31121","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/31121"},{"name":"31133","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/31133"},{"name":"31138","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/31138"},{"name":"31130","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/31130"},{"name":"31127","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/31127"},{"name":"31202","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/31202"},{"name":"31108","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/31108"},{"name":"31129","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/31129"},{"name":"31132","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/31132"},{"name":"31118","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/31118"},{"name":"31142","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/31142"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2006-09-21T00:00:00.000Z","descriptions":[{"lang":"en","value":"Multiple PHP remote file inclusion vulnerabilities in SolidState 0.4 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the base_path parameter in manager/pages/ scripts including (1) AccountsPage.class.php, (2) AddInvoicePage.class.php, (3) AddIPAddressPage.class.php, (4) AddPaymentPage.class.php, (5) AddTaxRulePage.class.php, (6) AssignDomainPage.class.php, (7) AssignHostingPage.class.php, (8) AssignProductPage.class.php, (9) BillingPage.class.php, (10) BillingPaymentPage.class.php, (11) BrowseAccountsPage.class.php, (12) BrowseInvoicesPage.class.php, (13) ConfigureEditUserPage.class.php, (14) ConfigureNewUserPage.class.php, (15) ConfigureNewUserReceiptPage.class.php, (16) ConfigureUsersPage.class.php, (17) DeleteAccountPage.class.php, (18) DeleteDomainServicePage.class.php, (19) DeleteHostingServicePage.class.php, (20) DeleteInvoicePage.class.php, (21) DeleteProductPage.class.php, (22) DeleteServerPage.class.php, (23) DomainServicesPage.class.php, (24) DomainsPage.class.php, (25) EditAccountPage.class.php, (26) EditDomainPage.class.php, (27) EditDomainServicePage.class.php, (28) EditHostingServicePage.class.php, (29) EditPaymentPage.class.php, (30) EditProductPage.class.php, (31) EditServerPage.class.php, (32) EmailInvoicePage.class.php, (33) ExecuteOrderPage.class.php, (34) ExpiredDomainsPage.class.php, (35) FulfilledOrdersPage.class.php, (36) GenerateInvoicesPage.class.php, (37) HomePage.class.php, (38) InactiveAccountsPage.class.php, (39) IPManagerPage.class.php, (40) LoginPage.class.php, (41) LogPage.class.php, (42) ModulesPage.class.php, (43) NewAccountPage.class.php, (44) NewDomainServicePage.class.php, (45) NewProductPage.class.php, (46) OutstandingInvoicesPage.class.php, (47) PendingAccountsPage.class.php, (48) PendingOrdersPage.class.php, (49) PrintInvoicePage.class.php, (50) ProductsPage.class.php, (51) RegisterDomainPage.class.php, (52) RegisteredDomainsPage.class.php, (53) ServersPage.class.php, (54) ServicesHostingServicesPage.class.php, (55) ServicesNewHostingPage.class.php, (56) ServicesPage.class.php, (57) ServicesWebHostingPage.class.php, (58) SettingsPage.class.php, (59) TaxesPage.class.php, (60) TransferDomainPage.class.php, (61) ViewAccountPage.class.php, (62) ViewDomainServicePage.class.php, (63) ViewHostingServicePage.class.php, (64) ViewInvoicePage.class.php, (65) ViewLogMessagePage.class.php, (66) ViewOrderPage.class.php, (67) ViewProductPage.class.php, (68) ViewServerPage.class.php, (69) WelcomeEmailPage.class.php; and (70) modules/RegistrarModule.class.php, (71) modules/SolidStateModule.class.php, (72) modules/authorizeaim/authorizeaim.class.php, and (73) modules/authorizeaim/pages/AAIMConfigPage.class.php."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-10-18T16:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"solidstate-basepath-file-include(29095)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/29095"},{"name":"31120","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/31120"},{"name":"31147","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/31147"},{"name":"31141","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/31141"},{"name":"31139","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/31139"},{"name":"31192","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/31192"},{"name":"31106","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/31106"},{"name":"31135","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/31135"},{"name":"31117","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/31117"},{"name":"20070106 vendor ack: SolidState RFI","tags":["mailing-list","x_refsource_VIM"],"url":"http://attrition.org/pipermail/vim/2007-January/001210.html"},{"name":"31144","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/31144"},{"name":"21934","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/21934"},{"name":"31100","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/31100"},{"name":"31112","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/31112"},{"name":"31109","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/31109"},{"name":"31193","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/31193"},{"name":"31115","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/31115"},{"name":"31131","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/31131"},{"name":"31203","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/31203"},{"name":"31194","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/31194"},{"name":"31146","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/31146"},{"name":"31191","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/31191"},{"name":"31105","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/31105"},{"name":"31119","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/31119"},{"name":"31197","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/31197"},{"name":"31136","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/31136"},{"name":"31116","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/31116"},{"name":"31099","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/31099"},{"name":"31114","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/31114"},{"name":"31134","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/31134"},{"name":"31190","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/31190"},{"name":"31145","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/31145"},{"name":"31122","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/31122"},{"name":"31111","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/31111"},{"name":"31104","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/31104"},{"name":"31113","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/31113"},{"tags":["x_refsource_CONFIRM"],"url":"http://www.solid-state.org/index.php?name=PNphpBB2&file=portal&article=1"},{"name":"31199","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/31199"},{"name":"31128","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/31128"},{"name":"2413","tags":["exploit","x_refsource_EXPLOIT-DB"],"url":"https://www.exploit-db.com/exploits/2413"},{"name":"31125","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/31125"},{"name":"31107","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/31107"},{"name":"31098","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/31098"},{"name":"31137","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/31137"},{"name":"31200","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/31200"},{"name":"31143","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/31143"},{"name":"31198","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/31198"},{"name":"31123","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/31123"},{"name":"31126","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/31126"},{"name":"31124","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/31124"},{"name":"31201","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/31201"},{"name":"31097","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/31097"},{"name":"31110","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/31110"},{"name":"31121","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/31121"},{"name":"31133","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/31133"},{"name":"31138","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/31138"},{"name":"31130","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/31130"},{"name":"31127","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/31127"},{"name":"31202","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/31202"},{"name":"31108","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/31108"},{"name":"31129","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/31129"},{"name":"31132","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/31132"},{"name":"31118","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/31118"},{"name":"31142","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/31142"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2006-5020","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Multiple PHP remote file inclusion vulnerabilities in SolidState 0.4 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the base_path parameter in manager/pages/ scripts including (1) AccountsPage.class.php, (2) AddInvoicePage.class.php, (3) AddIPAddressPage.class.php, (4) AddPaymentPage.class.php, (5) AddTaxRulePage.class.php, (6) AssignDomainPage.class.php, (7) AssignHostingPage.class.php, (8) AssignProductPage.class.php, (9) BillingPage.class.php, (10) BillingPaymentPage.class.php, (11) BrowseAccountsPage.class.php, (12) BrowseInvoicesPage.class.php, (13) ConfigureEditUserPage.class.php, (14) ConfigureNewUserPage.class.php, (15) ConfigureNewUserReceiptPage.class.php, (16) ConfigureUsersPage.class.php, (17) DeleteAccountPage.class.php, (18) DeleteDomainServicePage.class.php, (19) DeleteHostingServicePage.class.php, (20) DeleteInvoicePage.class.php, (21) DeleteProductPage.class.php, (22) DeleteServerPage.class.php, (23) DomainServicesPage.class.php, (24) DomainsPage.class.php, (25) EditAccountPage.class.php, (26) EditDomainPage.class.php, (27) EditDomainServicePage.class.php, (28) EditHostingServicePage.class.php, (29) EditPaymentPage.class.php, (30) EditProductPage.class.php, (31) EditServerPage.class.php, (32) EmailInvoicePage.class.php, (33) ExecuteOrderPage.class.php, (34) ExpiredDomainsPage.class.php, (35) FulfilledOrdersPage.class.php, (36) GenerateInvoicesPage.class.php, (37) HomePage.class.php, (38) InactiveAccountsPage.class.php, (39) IPManagerPage.class.php, (40) LoginPage.class.php, (41) LogPage.class.php, (42) ModulesPage.class.php, (43) NewAccountPage.class.php, (44) NewDomainServicePage.class.php, (45) NewProductPage.class.php, (46) OutstandingInvoicesPage.class.php, (47) PendingAccountsPage.class.php, (48) PendingOrdersPage.class.php, (49) PrintInvoicePage.class.php, (50) ProductsPage.class.php, (51) RegisterDomainPage.class.php, (52) RegisteredDomainsPage.class.php, (53) ServersPage.class.php, (54) ServicesHostingServicesPage.class.php, (55) ServicesNewHostingPage.class.php, (56) ServicesPage.class.php, (57) ServicesWebHostingPage.class.php, (58) SettingsPage.class.php, (59) TaxesPage.class.php, (60) TransferDomainPage.class.php, (61) ViewAccountPage.class.php, (62) ViewDomainServicePage.class.php, (63) ViewHostingServicePage.class.php, (64) ViewInvoicePage.class.php, (65) ViewLogMessagePage.class.php, (66) ViewOrderPage.class.php, (67) ViewProductPage.class.php, (68) ViewServerPage.class.php, (69) WelcomeEmailPage.class.php; and (70) modules/RegistrarModule.class.php, (71) modules/SolidStateModule.class.php, (72) modules/authorizeaim/authorizeaim.class.php, and (73) modules/authorizeaim/pages/AAIMConfigPage.class.php."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"solidstate-basepath-file-include(29095)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/29095"},{"name":"31120","refsource":"OSVDB","url":"http://www.osvdb.org/31120"},{"name":"31147","refsource":"OSVDB","url":"http://www.osvdb.org/31147"},{"name":"31141","refsource":"OSVDB","url":"http://www.osvdb.org/31141"},{"name":"31139","refsource":"OSVDB","url":"http://www.osvdb.org/31139"},{"name":"31192","refsource":"OSVDB","url":"http://www.osvdb.org/31192"},{"name":"31106","refsource":"OSVDB","url":"http://www.osvdb.org/31106"},{"name":"31135","refsource":"OSVDB","url":"http://www.osvdb.org/31135"},{"name":"31117","refsource":"OSVDB","url":"http://www.osvdb.org/31117"},{"name":"20070106 vendor ack: SolidState RFI","refsource":"VIM","url":"http://attrition.org/pipermail/vim/2007-January/001210.html"},{"name":"31144","refsource":"OSVDB","url":"http://www.osvdb.org/31144"},{"name":"21934","refsource":"BID","url":"http://www.securityfocus.com/bid/21934"},{"name":"31100","refsource":"OSVDB","url":"http://www.osvdb.org/31100"},{"name":"31112","refsource":"OSVDB","url":"http://www.osvdb.org/31112"},{"name":"31109","refsource":"OSVDB","url":"http://www.osvdb.org/31109"},{"name":"31193","refsource":"OSVDB","url":"http://www.osvdb.org/31193"},{"name":"31115","refsource":"OSVDB","url":"http://www.osvdb.org/31115"},{"name":"31131","refsource":"OSVDB","url":"http://www.osvdb.org/31131"},{"name":"31203","refsource":"OSVDB","url":"http://www.osvdb.org/31203"},{"name":"31194","refsource":"OSVDB","url":"http://www.osvdb.org/31194"},{"name":"31146","refsource":"OSVDB","url":"http://www.osvdb.org/31146"},{"name":"31191","refsource":"OSVDB","url":"http://www.osvdb.org/31191"},{"name":"31105","refsource":"OSVDB","url":"http://www.osvdb.org/31105"},{"name":"31119","refsource":"OSVDB","url":"http://www.osvdb.org/31119"},{"name":"31197","refsource":"OSVDB","url":"http://www.osvdb.org/31197"},{"name":"31136","refsource":"OSVDB","url":"http://www.osvdb.org/31136"},{"name":"31116","refsource":"OSVDB","url":"http://www.osvdb.org/31116"},{"name":"31099","refsource":"OSVDB","url":"http://www.osvdb.org/31099"},{"name":"31114","refsource":"OSVDB","url":"http://www.osvdb.org/31114"},{"name":"31134","refsource":"OSVDB","url":"http://www.osvdb.org/31134"},{"name":"31190","refsource":"OSVDB","url":"http://www.osvdb.org/31190"},{"name":"31145","refsource":"OSVDB","url":"http://www.osvdb.org/31145"},{"name":"31122","refsource":"OSVDB","url":"http://www.osvdb.org/31122"},{"name":"31111","refsource":"OSVDB","url":"http://www.osvdb.org/31111"},{"name":"31104","refsource":"OSVDB","url":"http://www.osvdb.org/31104"},{"name":"31113","refsource":"OSVDB","url":"http://www.osvdb.org/31113"},{"name":"http://www.solid-state.org/index.php?name=PNphpBB2&file=portal&article=1","refsource":"CONFIRM","url":"http://www.solid-state.org/index.php?name=PNphpBB2&file=portal&article=1"},{"name":"31199","refsource":"OSVDB","url":"http://www.osvdb.org/31199"},{"name":"31128","refsource":"OSVDB","url":"http://www.osvdb.org/31128"},{"name":"2413","refsource":"EXPLOIT-DB","url":"https://www.exploit-db.com/exploits/2413"},{"name":"31125","refsource":"OSVDB","url":"http://www.osvdb.org/31125"},{"name":"31107","refsource":"OSVDB","url":"http://www.osvdb.org/31107"},{"name":"31098","refsource":"OSVDB","url":"http://www.osvdb.org/31098"},{"name":"31137","refsource":"OSVDB","url":"http://www.osvdb.org/31137"},{"name":"31200","refsource":"OSVDB","url":"http://www.osvdb.org/31200"},{"name":"31143","refsource":"OSVDB","url":"http://www.osvdb.org/31143"},{"name":"31198","refsource":"OSVDB","url":"http://www.osvdb.org/31198"},{"name":"31123","refsource":"OSVDB","url":"http://www.osvdb.org/31123"},{"name":"31126","refsource":"OSVDB","url":"http://www.osvdb.org/31126"},{"name":"31124","refsource":"OSVDB","url":"http://www.osvdb.org/31124"},{"name":"31201","refsource":"OSVDB","url":"http://www.osvdb.org/31201"},{"name":"31097","refsource":"OSVDB","url":"http://www.osvdb.org/31097"},{"name":"31110","refsource":"OSVDB","url":"http://www.osvdb.org/31110"},{"name":"31121","refsource":"OSVDB","url":"http://www.osvdb.org/31121"},{"name":"31133","refsource":"OSVDB","url":"http://www.osvdb.org/31133"},{"name":"31138","refsource":"OSVDB","url":"http://www.osvdb.org/31138"},{"name":"31130","refsource":"OSVDB","url":"http://www.osvdb.org/31130"},{"name":"31127","refsource":"OSVDB","url":"http://www.osvdb.org/31127"},{"name":"31202","refsource":"OSVDB","url":"http://www.osvdb.org/31202"},{"name":"31108","refsource":"OSVDB","url":"http://www.osvdb.org/31108"},{"name":"31129","refsource":"OSVDB","url":"http://www.osvdb.org/31129"},{"name":"31132","refsource":"OSVDB","url":"http://www.osvdb.org/31132"},{"name":"31118","refsource":"OSVDB","url":"http://www.osvdb.org/31118"},{"name":"31142","refsource":"OSVDB","url":"http://www.osvdb.org/31142"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2006-5020","datePublished":"2006-09-27T23:00:00.000Z","dateReserved":"2006-09-27T00:00:00.000Z","dateUpdated":"2024-08-07T19:32:22.868Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2006-09-27 23:07:00","lastModifiedDate":"2026-04-23 00:35:47","problem_types":["NVD-CWE-Other","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:solidstate:solidstate:*:*:*:*:*:*:*:*","versionEndIncluding":"0.4","matchCriteriaId":"3926D4E5-71C8-4871-BD2D-8450F8EF9B43"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2006","CveId":"5020","Ordinal":"1","Title":"CVE-2006-5020","CVE":"CVE-2006-5020","Year":"2006"},"notes":[{"CveYear":"2006","CveId":"5020","Ordinal":"1","NoteData":"Multiple PHP remote file inclusion vulnerabilities in SolidState 0.4 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the base_path parameter in manager/pages/ scripts including (1) AccountsPage.class.php, (2) AddInvoicePage.class.php, (3) AddIPAddressPage.class.php, (4) AddPaymentPage.class.php, (5) AddTaxRulePage.class.php, (6) AssignDomainPage.class.php, (7) AssignHostingPage.class.php, (8) AssignProductPage.class.php, (9) BillingPage.class.php, (10) BillingPaymentPage.class.php, (11) BrowseAccountsPage.class.php, (12) BrowseInvoicesPage.class.php, (13) ConfigureEditUserPage.class.php, (14) ConfigureNewUserPage.class.php, (15) ConfigureNewUserReceiptPage.class.php, (16) ConfigureUsersPage.class.php, (17) DeleteAccountPage.class.php, (18) DeleteDomainServicePage.class.php, (19) DeleteHostingServicePage.class.php, (20) DeleteInvoicePage.class.php, (21) DeleteProductPage.class.php, (22) DeleteServerPage.class.php, (23) DomainServicesPage.class.php, (24) DomainsPage.class.php, (25) EditAccountPage.class.php, (26) EditDomainPage.class.php, (27) EditDomainServicePage.class.php, (28) EditHostingServicePage.class.php, (29) EditPaymentPage.class.php, (30) EditProductPage.class.php, (31) EditServerPage.class.php, (32) EmailInvoicePage.class.php, (33) ExecuteOrderPage.class.php, (34) ExpiredDomainsPage.class.php, (35) FulfilledOrdersPage.class.php, (36) GenerateInvoicesPage.class.php, (37) HomePage.class.php, (38) InactiveAccountsPage.class.php, (39) IPManagerPage.class.php, (40) LoginPage.class.php, (41) LogPage.class.php, (42) ModulesPage.class.php, (43) NewAccountPage.class.php, (44) NewDomainServicePage.class.php, (45) NewProductPage.class.php, (46) OutstandingInvoicesPage.class.php, (47) PendingAccountsPage.class.php, (48) PendingOrdersPage.class.php, (49) PrintInvoicePage.class.php, (50) ProductsPage.class.php, (51) RegisterDomainPage.class.php, (52) RegisteredDomainsPage.class.php, (53) ServersPage.class.php, (54) ServicesHostingServicesPage.class.php, (55) ServicesNewHostingPage.class.php, (56) ServicesPage.class.php, (57) ServicesWebHostingPage.class.php, (58) SettingsPage.class.php, (59) TaxesPage.class.php, (60) TransferDomainPage.class.php, (61) ViewAccountPage.class.php, (62) ViewDomainServicePage.class.php, (63) ViewHostingServicePage.class.php, (64) ViewInvoicePage.class.php, (65) ViewLogMessagePage.class.php, (66) ViewOrderPage.class.php, (67) ViewProductPage.class.php, (68) ViewServerPage.class.php, (69) WelcomeEmailPage.class.php; and (70) modules/RegistrarModule.class.php, (71) modules/SolidStateModule.class.php, (72) modules/authorizeaim/authorizeaim.class.php, and (73) modules/authorizeaim/pages/AAIMConfigPage.class.php.","Type":"Description","Title":"CVE-2006-5020"},{"CveYear":"2006","CveId":"5020","Ordinal":"2","NoteData":"2006-09-27","Type":"Other","Title":"Published"},{"CveYear":"2006","CveId":"5020","Ordinal":"3","NoteData":"2017-10-18","Type":"Other","Title":"Modified"}]}}}