CVE-2006-4418 - Directory traversal vulnerability in index.php for Wikepage 2006.2a Opus 10 allows remote attackers

CVE-2006-4418

Summary

Directory traversal vulnerability in index.php for Wikepage 2006.2a Opus 10 allows remote attackers to include arbitrary local files via the lng parameter, as demonstrated by inserting PHP code into a log file.

References

http://secunia.com/advisories/21542
http://www.osvdb.org/28177
http://www.securityfocus.com/bid/19694
http://www.vupen.com/english/advisories/2006/3386
https://exchange.xforce.ibmcloud.com/vulnerabilities/28555
https://www.exploit-db.com/exploits/2252

Vulnerable Configurations

cpe:2.3:a:wikepage:wikepage:2006.2:*:*:*:*:*:*:*
cpe:2.3:a:wikepage:wikepage:2006.2:*:*:*:*:*:*:*
cpe:2.3:a:wikepage:wikepage:2006.2a:*:*:*:*:*:*:*
cpe:2.3:a:wikepage:wikepage:2006.2a:*:*:*:*:*:*:*

CVSS

Base:	4.0 (as of 19-10-2017 - 01:29)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	HIGH	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	PARTIAL	NONE

cvss-vector via4

AV:N/AC:H/Au:N/C:P/I:P/A:N

refmap via4

bid	19694
exploit-db	2252
osvdb	28177
secunia	21542
vupen	ADV-2006-3386
xf	wikepage-index-file-include(28555)

Last major update

19-10-2017 - 01:29

Published

28-08-2006 - 21:04

Last modified

19-10-2017 - 01:29