ID CVE-2006-4373
Summary PHP remote file inclusion vulnerability in modules/visitors2/include/config.inc.php in pSlash 0.70 allows remote attackers to execute arbitrary PHP code via a URL in the lvc_include_dir parameter.
References
Vulnerable Configurations
  • cpe:2.3:a:derek_leung:pslash:0.70:*:*:*:*:*:*:*
    cpe:2.3:a:derek_leung:pslash:0.70:*:*:*:*:*:*:*
CVSS
Base: 7.5 (as of 17-10-2018 - 21:36)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:P/I:P/A:P
refmap via4
bid 19693
bugtraq 20060824 pSlash v0.7 (lvc_include_dir) Remote Include Vulnerability
exploit-db 2249
sectrack 1016752
sreason 1449
vim 20060825 Source VERIFY of pSlash 0.7 file include
xf pslash-config-file-include(28543)
Last major update 17-10-2018 - 21:36
Published 26-08-2006 - 21:04
Back to Top