CVE-2006-5678 - PHP remote file inclusion vulnerability in common/visiteurs/include/library.inc.php in J-Pierre DEZE

CVE-2006-5678

Summary

PHP remote file inclusion vulnerability in common/visiteurs/include/library.inc.php in J-Pierre DEZELUS Les Visiteurs 2.0.1, as used in phpMyConferences (phpMyConference) 8.0.2 and possibly other products, allows remote attackers to execute arbitrary PHP code via a URL in the lvc_modules_dir parameter. NOTE: CVE disputes this vulnerability, because the inclusion occurs in a function that is not called during a direct request to library.inc.php

References

Vulnerable Configurations

cpe:2.3:a:j-pierre_dezelus:les_visiteurs:2.0.1:*:*:*:*:*:*:*
cpe:2.3:a:j-pierre_dezelus:les_visiteurs:2.0.1:*:*:*:*:*:*:*
cpe:2.3:a:phpmyconferences:phpmyconferences:8.0.2:*:*:*:*:*:*:*
cpe:2.3:a:phpmyconferences:phpmyconferences:8.0.2:*:*:*:*:*:*:*

CVSS

Base:	7.5 (as of 07-08-2024 - 20:15)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	PARTIAL	PARTIAL

cvss-vector via4

AV:N/AC:L/Au:N/C:P/I:P/A:P

refmap via4

bugtraq	20061031 phpMyConferences <= 8.0.2 Remote File Inclusion 20061103 Re: phpMyConferences <= 8.0.2 Remote File Inclusion
sreason	1810
vim	20061102 CVE dispute - phpMyConferences RFI
xf	phpmyconferences-library-file-include(29919)

Last major update

07-08-2024 - 20:15

Published

03-11-2006 - 11:07

Last modified

07-08-2024 - 20:15