Search

Find a vulnerability

Search criteria ⓘ Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.

    16 vulnerabilities by campware.org

    CVE-2010-1867 (GCVE-0-2010-1867)

    Vulnerability from nvd – Published: 2010-05-07 22:00 – Updated: 2024-08-07 01:35
    VLAI
    Summary
    SQL injection vulnerability in the ArticleAttachment::GetAttachmentsByArticleNumber method in javascript/tinymcs/plugins/campsiteattachment/attachments.php in Campsite 3.3.5 and earlier allows remote attackers to execute arbitrary SQL commands via the article_id parameter.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    mitre CNA under the mitre root
    CNA scorecard E 27/100 over 2319 records in the last 180 days details
    References
    URL Tags
    http://osvdb.org/64215 vdb-entryx_refsource_OSVDB
    https://exchange.xforce.ibmcloud.com/vulnerabilit… vdb-entryx_refsource_XF
    http://secunia.com/advisories/39580 third-party-advisoryx_refsource_SECUNIA
    http://www.campware.org/en/camp/campsite_news/832/ x_refsource_CONFIRM
    http://php-security.org/2010/05/01/mops-2010-002-… x_refsource_MISC
    http://www.securityfocus.com/bid/39862 vdb-entryx_refsource_BID
    Date Public
    2010-05-01 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-07T01:35:53.857Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "name": "64215",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://osvdb.org/64215"
              },
              {
                "name": "campsite-articleid-sql-injection(58285)",
                "tags": [
                  "vdb-entry",
                  "x_refsource_XF",
                  "x_transferred"
                ],
                "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/58285"
              },
              {
                "name": "39580",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/39580"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://www.campware.org/en/camp/campsite_news/832/"
              },
              {
                "tags": [
                  "x_refsource_MISC",
                  "x_transferred"
                ],
                "url": "http://php-security.org/2010/05/01/mops-2010-002-campsite-tinymce-article-attachment-sql-injection-vulnerability/index.html"
              },
              {
                "name": "39862",
                "tags": [
                  "vdb-entry",
                  "x_refsource_BID",
                  "x_transferred"
                ],
                "url": "http://www.securityfocus.com/bid/39862"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "n/a",
              "vendor": "n/a",
              "versions": [
                {
                  "status": "affected",
                  "version": "n/a"
                }
              ]
            }
          ],
          "datePublic": "2010-05-01T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "SQL injection vulnerability in the ArticleAttachment::GetAttachmentsByArticleNumber method in javascript/tinymcs/plugins/campsiteattachment/attachments.php in Campsite 3.3.5 and earlier allows remote attackers to execute arbitrary SQL commands via the article_id parameter."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "n/a",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2017-08-16T14:57:01.000Z",
            "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            "shortName": "mitre"
          },
          "references": [
            {
              "name": "64215",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://osvdb.org/64215"
            },
            {
              "name": "campsite-articleid-sql-injection(58285)",
              "tags": [
                "vdb-entry",
                "x_refsource_XF"
              ],
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/58285"
            },
            {
              "name": "39580",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/39580"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://www.campware.org/en/camp/campsite_news/832/"
            },
            {
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "http://php-security.org/2010/05/01/mops-2010-002-campsite-tinymce-article-attachment-sql-injection-vulnerability/index.html"
            },
            {
              "name": "39862",
              "tags": [
                "vdb-entry",
                "x_refsource_BID"
              ],
              "url": "http://www.securityfocus.com/bid/39862"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "cve@mitre.org",
              "ID": "CVE-2010-1867",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "n/a",
                          "version": {
                            "version_data": [
                              {
                                "version_value": "n/a"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "n/a"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "SQL injection vulnerability in the ArticleAttachment::GetAttachmentsByArticleNumber method in javascript/tinymcs/plugins/campsiteattachment/attachments.php in Campsite 3.3.5 and earlier allows remote attackers to execute arbitrary SQL commands via the article_id parameter."
                }
              ]
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "n/a"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "64215",
                  "refsource": "OSVDB",
                  "url": "http://osvdb.org/64215"
                },
                {
                  "name": "campsite-articleid-sql-injection(58285)",
                  "refsource": "XF",
                  "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/58285"
                },
                {
                  "name": "39580",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/39580"
                },
                {
                  "name": "http://www.campware.org/en/camp/campsite_news/832/",
                  "refsource": "CONFIRM",
                  "url": "http://www.campware.org/en/camp/campsite_news/832/"
                },
                {
                  "name": "http://php-security.org/2010/05/01/mops-2010-002-campsite-tinymce-article-attachment-sql-injection-vulnerability/index.html",
                  "refsource": "MISC",
                  "url": "http://php-security.org/2010/05/01/mops-2010-002-campsite-tinymce-article-attachment-sql-injection-vulnerability/index.html"
                },
                {
                  "name": "39862",
                  "refsource": "BID",
                  "url": "http://www.securityfocus.com/bid/39862"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "assignerShortName": "mitre",
        "cveId": "CVE-2010-1867",
        "datePublished": "2010-05-07T22:00:00.000Z",
        "dateReserved": "2010-05-07T00:00:00.000Z",
        "dateUpdated": "2024-08-07T01:35:53.857Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2009-2183 (GCVE-0-2009-2183)

    Vulnerability from nvd – Published: 2009-06-23 21:21 – Updated: 2024-08-07 05:44
    VLAI
    Summary
    Directory traversal vulnerability in admin-files/ad.php in Campsite 3.3.0 RC1 allows remote attackers to read and possibly execute arbitrary local files via a .. (dot dot) in the GLOBALS[g_campsiteDir] parameter.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    mitre CNA under the mitre root
    CNA scorecard E 27/100 over 2319 records in the last 180 days details
    References
    URL Tags
    https://www.exploit-db.com/exploits/8995 exploitx_refsource_EXPLOIT-DB
    http://osvdb.org/55312 vdb-entryx_refsource_OSVDB
    Date Public
    2009-06-22 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-07T05:44:55.205Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "name": "8995",
                "tags": [
                  "exploit",
                  "x_refsource_EXPLOIT-DB",
                  "x_transferred"
                ],
                "url": "https://www.exploit-db.com/exploits/8995"
              },
              {
                "name": "55312",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://osvdb.org/55312"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "n/a",
              "vendor": "n/a",
              "versions": [
                {
                  "status": "affected",
                  "version": "n/a"
                }
              ]
            }
          ],
          "datePublic": "2009-06-22T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "Directory traversal vulnerability in admin-files/ad.php in Campsite 3.3.0 RC1 allows remote attackers to read and possibly execute arbitrary local files via a .. (dot dot) in the GLOBALS[g_campsiteDir] parameter."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "n/a",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2017-09-28T12:57:01.000Z",
            "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            "shortName": "mitre"
          },
          "references": [
            {
              "name": "8995",
              "tags": [
                "exploit",
                "x_refsource_EXPLOIT-DB"
              ],
              "url": "https://www.exploit-db.com/exploits/8995"
            },
            {
              "name": "55312",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://osvdb.org/55312"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "cve@mitre.org",
              "ID": "CVE-2009-2183",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "n/a",
                          "version": {
                            "version_data": [
                              {
                                "version_value": "n/a"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "n/a"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "Directory traversal vulnerability in admin-files/ad.php in Campsite 3.3.0 RC1 allows remote attackers to read and possibly execute arbitrary local files via a .. (dot dot) in the GLOBALS[g_campsiteDir] parameter."
                }
              ]
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "n/a"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "8995",
                  "refsource": "EXPLOIT-DB",
                  "url": "https://www.exploit-db.com/exploits/8995"
                },
                {
                  "name": "55312",
                  "refsource": "OSVDB",
                  "url": "http://osvdb.org/55312"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "assignerShortName": "mitre",
        "cveId": "CVE-2009-2183",
        "datePublished": "2009-06-23T21:21:00.000Z",
        "dateReserved": "2009-06-23T00:00:00.000Z",
        "dateUpdated": "2024-08-07T05:44:55.205Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2009-2182 (GCVE-0-2009-2182)

    Vulnerability from nvd – Published: 2009-06-23 21:21 – Updated: 2024-08-07 05:44
    VLAI
    Summary
    Multiple PHP remote file inclusion vulnerabilities in Campsite 3.3.0 RC1 allow remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[g_campsiteDir] parameter to (1) ad_popup.php, (2) camp_html.php, (3) init_content.php, (4) logout.php, (5) menu.php, and (6) set-author.php in admin-files/; (7) conf/liveuser_configuration.php; (8) include/phorum_load.php; (9) CommandProcessor.php and (10) index.php in admin-files/article_import; and (11) add.php, (12) add_move.php, (13) autopublish.php, and (14) autopublish_del.php in admin-files/articles/.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    mitre CNA under the mitre root
    CNA scorecard E 27/100 over 2319 records in the last 180 days details
    References
    URL Tags
    https://www.exploit-db.com/exploits/8995 exploitx_refsource_EXPLOIT-DB
    Date Public
    2009-06-22 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-07T05:44:55.290Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "name": "8995",
                "tags": [
                  "exploit",
                  "x_refsource_EXPLOIT-DB",
                  "x_transferred"
                ],
                "url": "https://www.exploit-db.com/exploits/8995"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "n/a",
              "vendor": "n/a",
              "versions": [
                {
                  "status": "affected",
                  "version": "n/a"
                }
              ]
            }
          ],
          "datePublic": "2009-06-22T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "Multiple PHP remote file inclusion vulnerabilities in Campsite 3.3.0 RC1 allow remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[g_campsiteDir] parameter to (1) ad_popup.php, (2) camp_html.php, (3) init_content.php, (4) logout.php, (5) menu.php, and (6) set-author.php in admin-files/; (7) conf/liveuser_configuration.php; (8) include/phorum_load.php; (9) CommandProcessor.php and (10) index.php in admin-files/article_import; and (11) add.php, (12) add_move.php, (13) autopublish.php, and (14) autopublish_del.php in admin-files/articles/."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "n/a",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2017-09-28T12:57:01.000Z",
            "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            "shortName": "mitre"
          },
          "references": [
            {
              "name": "8995",
              "tags": [
                "exploit",
                "x_refsource_EXPLOIT-DB"
              ],
              "url": "https://www.exploit-db.com/exploits/8995"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "cve@mitre.org",
              "ID": "CVE-2009-2182",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "n/a",
                          "version": {
                            "version_data": [
                              {
                                "version_value": "n/a"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "n/a"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "Multiple PHP remote file inclusion vulnerabilities in Campsite 3.3.0 RC1 allow remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[g_campsiteDir] parameter to (1) ad_popup.php, (2) camp_html.php, (3) init_content.php, (4) logout.php, (5) menu.php, and (6) set-author.php in admin-files/; (7) conf/liveuser_configuration.php; (8) include/phorum_load.php; (9) CommandProcessor.php and (10) index.php in admin-files/article_import; and (11) add.php, (12) add_move.php, (13) autopublish.php, and (14) autopublish_del.php in admin-files/articles/."
                }
              ]
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "n/a"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "8995",
                  "refsource": "EXPLOIT-DB",
                  "url": "https://www.exploit-db.com/exploits/8995"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "assignerShortName": "mitre",
        "cveId": "CVE-2009-2182",
        "datePublished": "2009-06-23T21:21:00.000Z",
        "dateReserved": "2009-06-23T00:00:00.000Z",
        "dateUpdated": "2024-08-07T05:44:55.290Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2009-2181 (GCVE-0-2009-2181)

    Vulnerability from nvd – Published: 2009-06-23 21:21 – Updated: 2024-08-07 05:44
    VLAI
    Summary
    Cross-site scripting (XSS) vulnerability in admin-files/templates/list_dir.php in Campsite 3.3.0 RC1 allows remote attackers to inject arbitrary web script or HTML via the listbasedir parameter.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    mitre CNA under the mitre root
    CNA scorecard E 27/100 over 2319 records in the last 180 days details
    References
    URL Tags
    https://www.exploit-db.com/exploits/8995 exploitx_refsource_EXPLOIT-DB
    http://osvdb.org/55313 vdb-entryx_refsource_OSVDB
    Date Public
    2009-06-22 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-07T05:44:55.155Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "name": "8995",
                "tags": [
                  "exploit",
                  "x_refsource_EXPLOIT-DB",
                  "x_transferred"
                ],
                "url": "https://www.exploit-db.com/exploits/8995"
              },
              {
                "name": "55313",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://osvdb.org/55313"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "n/a",
              "vendor": "n/a",
              "versions": [
                {
                  "status": "affected",
                  "version": "n/a"
                }
              ]
            }
          ],
          "datePublic": "2009-06-22T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "Cross-site scripting (XSS) vulnerability in admin-files/templates/list_dir.php in Campsite 3.3.0 RC1 allows remote attackers to inject arbitrary web script or HTML via the listbasedir parameter."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "n/a",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2017-09-28T12:57:01.000Z",
            "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            "shortName": "mitre"
          },
          "references": [
            {
              "name": "8995",
              "tags": [
                "exploit",
                "x_refsource_EXPLOIT-DB"
              ],
              "url": "https://www.exploit-db.com/exploits/8995"
            },
            {
              "name": "55313",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://osvdb.org/55313"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "cve@mitre.org",
              "ID": "CVE-2009-2181",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "n/a",
                          "version": {
                            "version_data": [
                              {
                                "version_value": "n/a"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "n/a"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "Cross-site scripting (XSS) vulnerability in admin-files/templates/list_dir.php in Campsite 3.3.0 RC1 allows remote attackers to inject arbitrary web script or HTML via the listbasedir parameter."
                }
              ]
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "n/a"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "8995",
                  "refsource": "EXPLOIT-DB",
                  "url": "https://www.exploit-db.com/exploits/8995"
                },
                {
                  "name": "55313",
                  "refsource": "OSVDB",
                  "url": "http://osvdb.org/55313"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "assignerShortName": "mitre",
        "cveId": "CVE-2009-2181",
        "datePublished": "2009-06-23T21:21:00.000Z",
        "dateReserved": "2009-06-23T00:00:00.000Z",
        "dateUpdated": "2024-08-07T05:44:55.155Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2006-5911 (GCVE-0-2006-5911)

    Vulnerability from nvd – Published: 2006-11-15 15:00 – Updated: 2024-08-07 20:12
    VLAI
    Summary
    Multiple PHP remote file inclusion vulnerabilities in Campware Campsite before 2.6.2 allow remote attackers to execute arbitrary PHP code via a URL in the g_documentRoot parameter to (1) Alias.php, (2) Article.php, (3) ArticleAttachment.php, (4) ArticleComment.php, (5) ArticleData.php, (6) ArticleImage.php, (7) ArticleIndex.php, (8) ArticlePublish.php, (9) ArticleTopic.php, (10) ArticleType.php, (11) ArticleTypeField.php, (12) Attachment.php, (13) Country.php, (14) DatabaseObject.php, (15) Event.php, (16) IPAccess.php, (17) Image.php, (18) Issue.php, (19) IssuePublish.php, (20) Language.php, (21) Log.php, (22) LoginAttempts.php, (23) Publication.php, (24) Section.php, (25) ShortURL.php, (26) Subscription.php, (27) SubscriptionDefaultTime.php, (28) SubscriptionSection.php, (29) SystemPref.php, (30) Template.php, (31) TimeUnit.php, (32) Topic.php, (33) UrlType.php, (34) User.php, and (35) UserType.php in implementation/management/classes/; (36) configuration.php and (37) db_connect.php in implementation/management/; and (38) LocalizerConfig.php and (39) LocalizerLanguage.php in implementation/management/priv/localizer/.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    mitre CNA under the mitre root
    CNA scorecard E 27/100 over 2319 records in the last 180 days details
    References
    URL Tags
    http://www.osvdb.org/34217 vdb-entryx_refsource_OSVDB
    http://www.osvdb.org/34215 vdb-entryx_refsource_OSVDB
    http://www.osvdb.org/34189 vdb-entryx_refsource_OSVDB
    http://www.osvdb.org/34214 vdb-entryx_refsource_OSVDB
    http://sourceforge.net/project/shownotes.php?rele… x_refsource_CONFIRM
    http://www.osvdb.org/34198 vdb-entryx_refsource_OSVDB
    http://www.osvdb.org/34195 vdb-entryx_refsource_OSVDB
    http://www.osvdb.org/34205 vdb-entryx_refsource_OSVDB
    http://www.osvdb.org/34187 vdb-entryx_refsource_OSVDB
    http://www.osvdb.org/34208 vdb-entryx_refsource_OSVDB
    http://www.osvdb.org/34216 vdb-entryx_refsource_OSVDB
    http://code.campware.org/projects/campsite/ticket/2349 x_refsource_CONFIRM
    http://www.osvdb.org/34224 vdb-entryx_refsource_OSVDB
    http://code.campware.org/projects/campsite/query?… x_refsource_CONFIRM
    http://www.osvdb.org/34197 vdb-entryx_refsource_OSVDB
    http://www.osvdb.org/34221 vdb-entryx_refsource_OSVDB
    http://www.osvdb.org/34213 vdb-entryx_refsource_OSVDB
    http://www.osvdb.org/34209 vdb-entryx_refsource_OSVDB
    http://www.osvdb.org/34211 vdb-entryx_refsource_OSVDB
    http://www.osvdb.org/34191 vdb-entryx_refsource_OSVDB
    http://code.campware.org/projects/campsite/change… x_refsource_CONFIRM
    http://www.osvdb.org/34225 vdb-entryx_refsource_OSVDB
    http://www.osvdb.org/34203 vdb-entryx_refsource_OSVDB
    http://www.osvdb.org/34200 vdb-entryx_refsource_OSVDB
    http://www.osvdb.org/34222 vdb-entryx_refsource_OSVDB
    http://www.osvdb.org/34223 vdb-entryx_refsource_OSVDB
    http://www.osvdb.org/34218 vdb-entryx_refsource_OSVDB
    http://www.osvdb.org/34206 vdb-entryx_refsource_OSVDB
    http://www.osvdb.org/34199 vdb-entryx_refsource_OSVDB
    http://www.osvdb.org/34196 vdb-entryx_refsource_OSVDB
    http://www.osvdb.org/34219 vdb-entryx_refsource_OSVDB
    http://www.osvdb.org/34201 vdb-entryx_refsource_OSVDB
    http://www.securityfocus.com/bid/23874 vdb-entryx_refsource_BID
    http://www.osvdb.org/34192 vdb-entryx_refsource_OSVDB
    http://www.osvdb.org/34210 vdb-entryx_refsource_OSVDB
    http://www.osvdb.org/34188 vdb-entryx_refsource_OSVDB
    http://www.osvdb.org/34204 vdb-entryx_refsource_OSVDB
    http://www.osvdb.org/34202 vdb-entryx_refsource_OSVDB
    http://www.osvdb.org/34190 vdb-entryx_refsource_OSVDB
    http://code.campware.org/projects/campsite/change… x_refsource_CONFIRM
    http://www.osvdb.org/34220 vdb-entryx_refsource_OSVDB
    http://www.osvdb.org/34207 vdb-entryx_refsource_OSVDB
    http://www.osvdb.org/34193 vdb-entryx_refsource_OSVDB
    http://www.osvdb.org/34194 vdb-entryx_refsource_OSVDB
    http://www.osvdb.org/34212 vdb-entryx_refsource_OSVDB
    Date Public
    2006-10-19 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-07T20:12:30.660Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "name": "34217",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://www.osvdb.org/34217"
              },
              {
                "name": "34215",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://www.osvdb.org/34215"
              },
              {
                "name": "34189",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://www.osvdb.org/34189"
              },
              {
                "name": "34214",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://www.osvdb.org/34214"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://sourceforge.net/project/shownotes.php?release_id=459574\u0026group_id=66936"
              },
              {
                "name": "34198",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://www.osvdb.org/34198"
              },
              {
                "name": "34195",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://www.osvdb.org/34195"
              },
              {
                "name": "34205",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://www.osvdb.org/34205"
              },
              {
                "name": "34187",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://www.osvdb.org/34187"
              },
              {
                "name": "34208",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://www.osvdb.org/34208"
              },
              {
                "name": "34216",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://www.osvdb.org/34216"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://code.campware.org/projects/campsite/ticket/2349"
              },
              {
                "name": "34224",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://www.osvdb.org/34224"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://code.campware.org/projects/campsite/query?milestone=2.6.2"
              },
              {
                "name": "34197",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://www.osvdb.org/34197"
              },
              {
                "name": "34221",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://www.osvdb.org/34221"
              },
              {
                "name": "34213",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://www.osvdb.org/34213"
              },
              {
                "name": "34209",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://www.osvdb.org/34209"
              },
              {
                "name": "34211",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://www.osvdb.org/34211"
              },
              {
                "name": "34191",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://www.osvdb.org/34191"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://code.campware.org/projects/campsite/changeset/6057"
              },
              {
                "name": "34225",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://www.osvdb.org/34225"
              },
              {
                "name": "34203",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://www.osvdb.org/34203"
              },
              {
                "name": "34200",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://www.osvdb.org/34200"
              },
              {
                "name": "34222",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://www.osvdb.org/34222"
              },
              {
                "name": "34223",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://www.osvdb.org/34223"
              },
              {
                "name": "34218",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://www.osvdb.org/34218"
              },
              {
                "name": "34206",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://www.osvdb.org/34206"
              },
              {
                "name": "34199",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://www.osvdb.org/34199"
              },
              {
                "name": "34196",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://www.osvdb.org/34196"
              },
              {
                "name": "34219",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://www.osvdb.org/34219"
              },
              {
                "name": "34201",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://www.osvdb.org/34201"
              },
              {
                "name": "23874",
                "tags": [
                  "vdb-entry",
                  "x_refsource_BID",
                  "x_transferred"
                ],
                "url": "http://www.securityfocus.com/bid/23874"
              },
              {
                "name": "34192",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://www.osvdb.org/34192"
              },
              {
                "name": "34210",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://www.osvdb.org/34210"
              },
              {
                "name": "34188",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://www.osvdb.org/34188"
              },
              {
                "name": "34204",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://www.osvdb.org/34204"
              },
              {
                "name": "34202",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://www.osvdb.org/34202"
              },
              {
                "name": "34190",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://www.osvdb.org/34190"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://code.campware.org/projects/campsite/changeset/6058"
              },
              {
                "name": "34220",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://www.osvdb.org/34220"
              },
              {
                "name": "34207",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://www.osvdb.org/34207"
              },
              {
                "name": "34193",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://www.osvdb.org/34193"
              },
              {
                "name": "34194",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://www.osvdb.org/34194"
              },
              {
                "name": "34212",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://www.osvdb.org/34212"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "n/a",
              "vendor": "n/a",
              "versions": [
                {
                  "status": "affected",
                  "version": "n/a"
                }
              ]
            }
          ],
          "datePublic": "2006-10-19T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "Multiple PHP remote file inclusion vulnerabilities in Campware Campsite before 2.6.2 allow remote attackers to execute arbitrary PHP code via a URL in the g_documentRoot parameter to (1) Alias.php, (2) Article.php, (3) ArticleAttachment.php, (4) ArticleComment.php, (5) ArticleData.php, (6) ArticleImage.php, (7) ArticleIndex.php, (8) ArticlePublish.php, (9) ArticleTopic.php, (10) ArticleType.php, (11) ArticleTypeField.php, (12) Attachment.php, (13) Country.php, (14) DatabaseObject.php, (15) Event.php, (16) IPAccess.php, (17) Image.php, (18) Issue.php, (19) IssuePublish.php, (20) Language.php, (21) Log.php, (22) LoginAttempts.php, (23) Publication.php, (24) Section.php, (25) ShortURL.php, (26) Subscription.php, (27) SubscriptionDefaultTime.php, (28) SubscriptionSection.php, (29) SystemPref.php, (30) Template.php, (31) TimeUnit.php, (32) Topic.php, (33) UrlType.php, (34) User.php, and (35) UserType.php in implementation/management/classes/; (36) configuration.php and (37) db_connect.php in implementation/management/; and (38) LocalizerConfig.php and (39) LocalizerLanguage.php in implementation/management/priv/localizer/."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "n/a",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2007-05-10T09:00:00.000Z",
            "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            "shortName": "mitre"
          },
          "references": [
            {
              "name": "34217",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://www.osvdb.org/34217"
            },
            {
              "name": "34215",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://www.osvdb.org/34215"
            },
            {
              "name": "34189",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://www.osvdb.org/34189"
            },
            {
              "name": "34214",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://www.osvdb.org/34214"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://sourceforge.net/project/shownotes.php?release_id=459574\u0026group_id=66936"
            },
            {
              "name": "34198",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://www.osvdb.org/34198"
            },
            {
              "name": "34195",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://www.osvdb.org/34195"
            },
            {
              "name": "34205",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://www.osvdb.org/34205"
            },
            {
              "name": "34187",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://www.osvdb.org/34187"
            },
            {
              "name": "34208",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://www.osvdb.org/34208"
            },
            {
              "name": "34216",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://www.osvdb.org/34216"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://code.campware.org/projects/campsite/ticket/2349"
            },
            {
              "name": "34224",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://www.osvdb.org/34224"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://code.campware.org/projects/campsite/query?milestone=2.6.2"
            },
            {
              "name": "34197",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://www.osvdb.org/34197"
            },
            {
              "name": "34221",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://www.osvdb.org/34221"
            },
            {
              "name": "34213",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://www.osvdb.org/34213"
            },
            {
              "name": "34209",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://www.osvdb.org/34209"
            },
            {
              "name": "34211",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://www.osvdb.org/34211"
            },
            {
              "name": "34191",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://www.osvdb.org/34191"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://code.campware.org/projects/campsite/changeset/6057"
            },
            {
              "name": "34225",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://www.osvdb.org/34225"
            },
            {
              "name": "34203",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://www.osvdb.org/34203"
            },
            {
              "name": "34200",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://www.osvdb.org/34200"
            },
            {
              "name": "34222",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://www.osvdb.org/34222"
            },
            {
              "name": "34223",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://www.osvdb.org/34223"
            },
            {
              "name": "34218",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://www.osvdb.org/34218"
            },
            {
              "name": "34206",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://www.osvdb.org/34206"
            },
            {
              "name": "34199",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://www.osvdb.org/34199"
            },
            {
              "name": "34196",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://www.osvdb.org/34196"
            },
            {
              "name": "34219",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://www.osvdb.org/34219"
            },
            {
              "name": "34201",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://www.osvdb.org/34201"
            },
            {
              "name": "23874",
              "tags": [
                "vdb-entry",
                "x_refsource_BID"
              ],
              "url": "http://www.securityfocus.com/bid/23874"
            },
            {
              "name": "34192",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://www.osvdb.org/34192"
            },
            {
              "name": "34210",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://www.osvdb.org/34210"
            },
            {
              "name": "34188",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://www.osvdb.org/34188"
            },
            {
              "name": "34204",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://www.osvdb.org/34204"
            },
            {
              "name": "34202",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://www.osvdb.org/34202"
            },
            {
              "name": "34190",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://www.osvdb.org/34190"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://code.campware.org/projects/campsite/changeset/6058"
            },
            {
              "name": "34220",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://www.osvdb.org/34220"
            },
            {
              "name": "34207",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://www.osvdb.org/34207"
            },
            {
              "name": "34193",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://www.osvdb.org/34193"
            },
            {
              "name": "34194",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://www.osvdb.org/34194"
            },
            {
              "name": "34212",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://www.osvdb.org/34212"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "cve@mitre.org",
              "ID": "CVE-2006-5911",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "n/a",
                          "version": {
                            "version_data": [
                              {
                                "version_value": "n/a"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "n/a"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "Multiple PHP remote file inclusion vulnerabilities in Campware Campsite before 2.6.2 allow remote attackers to execute arbitrary PHP code via a URL in the g_documentRoot parameter to (1) Alias.php, (2) Article.php, (3) ArticleAttachment.php, (4) ArticleComment.php, (5) ArticleData.php, (6) ArticleImage.php, (7) ArticleIndex.php, (8) ArticlePublish.php, (9) ArticleTopic.php, (10) ArticleType.php, (11) ArticleTypeField.php, (12) Attachment.php, (13) Country.php, (14) DatabaseObject.php, (15) Event.php, (16) IPAccess.php, (17) Image.php, (18) Issue.php, (19) IssuePublish.php, (20) Language.php, (21) Log.php, (22) LoginAttempts.php, (23) Publication.php, (24) Section.php, (25) ShortURL.php, (26) Subscription.php, (27) SubscriptionDefaultTime.php, (28) SubscriptionSection.php, (29) SystemPref.php, (30) Template.php, (31) TimeUnit.php, (32) Topic.php, (33) UrlType.php, (34) User.php, and (35) UserType.php in implementation/management/classes/; (36) configuration.php and (37) db_connect.php in implementation/management/; and (38) LocalizerConfig.php and (39) LocalizerLanguage.php in implementation/management/priv/localizer/."
                }
              ]
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "n/a"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "34217",
                  "refsource": "OSVDB",
                  "url": "http://www.osvdb.org/34217"
                },
                {
                  "name": "34215",
                  "refsource": "OSVDB",
                  "url": "http://www.osvdb.org/34215"
                },
                {
                  "name": "34189",
                  "refsource": "OSVDB",
                  "url": "http://www.osvdb.org/34189"
                },
                {
                  "name": "34214",
                  "refsource": "OSVDB",
                  "url": "http://www.osvdb.org/34214"
                },
                {
                  "name": "http://sourceforge.net/project/shownotes.php?release_id=459574\u0026group_id=66936",
                  "refsource": "CONFIRM",
                  "url": "http://sourceforge.net/project/shownotes.php?release_id=459574\u0026group_id=66936"
                },
                {
                  "name": "34198",
                  "refsource": "OSVDB",
                  "url": "http://www.osvdb.org/34198"
                },
                {
                  "name": "34195",
                  "refsource": "OSVDB",
                  "url": "http://www.osvdb.org/34195"
                },
                {
                  "name": "34205",
                  "refsource": "OSVDB",
                  "url": "http://www.osvdb.org/34205"
                },
                {
                  "name": "34187",
                  "refsource": "OSVDB",
                  "url": "http://www.osvdb.org/34187"
                },
                {
                  "name": "34208",
                  "refsource": "OSVDB",
                  "url": "http://www.osvdb.org/34208"
                },
                {
                  "name": "34216",
                  "refsource": "OSVDB",
                  "url": "http://www.osvdb.org/34216"
                },
                {
                  "name": "http://code.campware.org/projects/campsite/ticket/2349",
                  "refsource": "CONFIRM",
                  "url": "http://code.campware.org/projects/campsite/ticket/2349"
                },
                {
                  "name": "34224",
                  "refsource": "OSVDB",
                  "url": "http://www.osvdb.org/34224"
                },
                {
                  "name": "http://code.campware.org/projects/campsite/query?milestone=2.6.2",
                  "refsource": "CONFIRM",
                  "url": "http://code.campware.org/projects/campsite/query?milestone=2.6.2"
                },
                {
                  "name": "34197",
                  "refsource": "OSVDB",
                  "url": "http://www.osvdb.org/34197"
                },
                {
                  "name": "34221",
                  "refsource": "OSVDB",
                  "url": "http://www.osvdb.org/34221"
                },
                {
                  "name": "34213",
                  "refsource": "OSVDB",
                  "url": "http://www.osvdb.org/34213"
                },
                {
                  "name": "34209",
                  "refsource": "OSVDB",
                  "url": "http://www.osvdb.org/34209"
                },
                {
                  "name": "34211",
                  "refsource": "OSVDB",
                  "url": "http://www.osvdb.org/34211"
                },
                {
                  "name": "34191",
                  "refsource": "OSVDB",
                  "url": "http://www.osvdb.org/34191"
                },
                {
                  "name": "http://code.campware.org/projects/campsite/changeset/6057",
                  "refsource": "CONFIRM",
                  "url": "http://code.campware.org/projects/campsite/changeset/6057"
                },
                {
                  "name": "34225",
                  "refsource": "OSVDB",
                  "url": "http://www.osvdb.org/34225"
                },
                {
                  "name": "34203",
                  "refsource": "OSVDB",
                  "url": "http://www.osvdb.org/34203"
                },
                {
                  "name": "34200",
                  "refsource": "OSVDB",
                  "url": "http://www.osvdb.org/34200"
                },
                {
                  "name": "34222",
                  "refsource": "OSVDB",
                  "url": "http://www.osvdb.org/34222"
                },
                {
                  "name": "34223",
                  "refsource": "OSVDB",
                  "url": "http://www.osvdb.org/34223"
                },
                {
                  "name": "34218",
                  "refsource": "OSVDB",
                  "url": "http://www.osvdb.org/34218"
                },
                {
                  "name": "34206",
                  "refsource": "OSVDB",
                  "url": "http://www.osvdb.org/34206"
                },
                {
                  "name": "34199",
                  "refsource": "OSVDB",
                  "url": "http://www.osvdb.org/34199"
                },
                {
                  "name": "34196",
                  "refsource": "OSVDB",
                  "url": "http://www.osvdb.org/34196"
                },
                {
                  "name": "34219",
                  "refsource": "OSVDB",
                  "url": "http://www.osvdb.org/34219"
                },
                {
                  "name": "34201",
                  "refsource": "OSVDB",
                  "url": "http://www.osvdb.org/34201"
                },
                {
                  "name": "23874",
                  "refsource": "BID",
                  "url": "http://www.securityfocus.com/bid/23874"
                },
                {
                  "name": "34192",
                  "refsource": "OSVDB",
                  "url": "http://www.osvdb.org/34192"
                },
                {
                  "name": "34210",
                  "refsource": "OSVDB",
                  "url": "http://www.osvdb.org/34210"
                },
                {
                  "name": "34188",
                  "refsource": "OSVDB",
                  "url": "http://www.osvdb.org/34188"
                },
                {
                  "name": "34204",
                  "refsource": "OSVDB",
                  "url": "http://www.osvdb.org/34204"
                },
                {
                  "name": "34202",
                  "refsource": "OSVDB",
                  "url": "http://www.osvdb.org/34202"
                },
                {
                  "name": "34190",
                  "refsource": "OSVDB",
                  "url": "http://www.osvdb.org/34190"
                },
                {
                  "name": "http://code.campware.org/projects/campsite/changeset/6058",
                  "refsource": "CONFIRM",
                  "url": "http://code.campware.org/projects/campsite/changeset/6058"
                },
                {
                  "name": "34220",
                  "refsource": "OSVDB",
                  "url": "http://www.osvdb.org/34220"
                },
                {
                  "name": "34207",
                  "refsource": "OSVDB",
                  "url": "http://www.osvdb.org/34207"
                },
                {
                  "name": "34193",
                  "refsource": "OSVDB",
                  "url": "http://www.osvdb.org/34193"
                },
                {
                  "name": "34194",
                  "refsource": "OSVDB",
                  "url": "http://www.osvdb.org/34194"
                },
                {
                  "name": "34212",
                  "refsource": "OSVDB",
                  "url": "http://www.osvdb.org/34212"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "assignerShortName": "mitre",
        "cveId": "CVE-2006-5911",
        "datePublished": "2006-11-15T15:00:00.000Z",
        "dateReserved": "2006-11-15T00:00:00.000Z",
        "dateUpdated": "2024-08-07T20:12:30.660Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2006-5910 (GCVE-0-2006-5910)

    Vulnerability from nvd – Published: 2006-11-15 15:00 – Updated: 2024-08-07 20:12
    VLAI
    Summary
    Multiple PHP remote file inclusion vulnerabilities in Campware Campsite before 20061110 allow remote attackers to execute arbitrary PHP code via a URL in the g_documentRoot parameter to (1) bugreporter/thankyou.php and (2) feedback/thankyou.php in implementation/management/priv/.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    mitre CNA under the mitre root
    CNA scorecard E 27/100 over 2319 records in the last 180 days details
    Date Public
    2006-10-16 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-07T20:12:30.515Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "name": "ADV-2006-4776",
                "tags": [
                  "vdb-entry",
                  "x_refsource_VUPEN",
                  "x_transferred"
                ],
                "url": "http://www.vupen.com/english/advisories/2006/4776"
              },
              {
                "name": "20519",
                "tags": [
                  "vdb-entry",
                  "x_refsource_BID",
                  "x_transferred"
                ],
                "url": "http://www.securityfocus.com/bid/20519"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://code.campware.org/projects/campsite/changeset/6119"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://code.campware.org/projects/campsite/ticket/2363"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://code.campware.org/projects/campsite/changeset/6118"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "n/a",
              "vendor": "n/a",
              "versions": [
                {
                  "status": "affected",
                  "version": "n/a"
                }
              ]
            }
          ],
          "datePublic": "2006-10-16T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "Multiple PHP remote file inclusion vulnerabilities in Campware Campsite before 20061110 allow remote attackers to execute arbitrary PHP code via a URL in the g_documentRoot parameter to (1) bugreporter/thankyou.php and (2) feedback/thankyou.php in implementation/management/priv/."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "n/a",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2006-12-08T10:00:00.000Z",
            "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            "shortName": "mitre"
          },
          "references": [
            {
              "name": "ADV-2006-4776",
              "tags": [
                "vdb-entry",
                "x_refsource_VUPEN"
              ],
              "url": "http://www.vupen.com/english/advisories/2006/4776"
            },
            {
              "name": "20519",
              "tags": [
                "vdb-entry",
                "x_refsource_BID"
              ],
              "url": "http://www.securityfocus.com/bid/20519"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://code.campware.org/projects/campsite/changeset/6119"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://code.campware.org/projects/campsite/ticket/2363"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://code.campware.org/projects/campsite/changeset/6118"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "cve@mitre.org",
              "ID": "CVE-2006-5910",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "n/a",
                          "version": {
                            "version_data": [
                              {
                                "version_value": "n/a"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "n/a"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "Multiple PHP remote file inclusion vulnerabilities in Campware Campsite before 20061110 allow remote attackers to execute arbitrary PHP code via a URL in the g_documentRoot parameter to (1) bugreporter/thankyou.php and (2) feedback/thankyou.php in implementation/management/priv/."
                }
              ]
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "n/a"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "ADV-2006-4776",
                  "refsource": "VUPEN",
                  "url": "http://www.vupen.com/english/advisories/2006/4776"
                },
                {
                  "name": "20519",
                  "refsource": "BID",
                  "url": "http://www.securityfocus.com/bid/20519"
                },
                {
                  "name": "http://code.campware.org/projects/campsite/changeset/6119",
                  "refsource": "CONFIRM",
                  "url": "http://code.campware.org/projects/campsite/changeset/6119"
                },
                {
                  "name": "http://code.campware.org/projects/campsite/ticket/2363",
                  "refsource": "CONFIRM",
                  "url": "http://code.campware.org/projects/campsite/ticket/2363"
                },
                {
                  "name": "http://code.campware.org/projects/campsite/changeset/6118",
                  "refsource": "CONFIRM",
                  "url": "http://code.campware.org/projects/campsite/changeset/6118"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "assignerShortName": "mitre",
        "cveId": "CVE-2006-5910",
        "datePublished": "2006-11-15T15:00:00.000Z",
        "dateReserved": "2006-11-15T00:00:00.000Z",
        "dateUpdated": "2024-08-07T20:12:30.515Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2006-5912 (GCVE-0-2006-5912)

    Vulnerability from nvd – Published: 2006-11-15 15:00 – Updated: 2024-09-16 18:04
    VLAI
    Summary
    Unspecified vulnerability in Campware Campsite before 2.6.2 has unknown impact and attack vectors, related to a "Security fix for you-know-what," possibly related to encrypted passwords.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    mitre CNA under the mitre root
    CNA scorecard E 27/100 over 2319 records in the last 180 days details
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-07T20:12:30.333Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://code.campware.org/projects/campsite/ticket/2344"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://sourceforge.net/project/shownotes.php?release_id=459574\u0026group_id=66936"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://code.campware.org/projects/campsite/query?milestone=2.6.2"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://code.campware.org/projects/campsite/changeset/6042"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://code.campware.org/projects/campsite/changeset/6041"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "n/a",
              "vendor": "n/a",
              "versions": [
                {
                  "status": "affected",
                  "version": "n/a"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "Unspecified vulnerability in Campware Campsite before 2.6.2 has unknown impact and attack vectors, related to a \"Security fix for you-know-what,\" possibly related to encrypted passwords."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "n/a",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2006-11-15T15:00:00.000Z",
            "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            "shortName": "mitre"
          },
          "references": [
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://code.campware.org/projects/campsite/ticket/2344"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://sourceforge.net/project/shownotes.php?release_id=459574\u0026group_id=66936"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://code.campware.org/projects/campsite/query?milestone=2.6.2"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://code.campware.org/projects/campsite/changeset/6042"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://code.campware.org/projects/campsite/changeset/6041"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "cve@mitre.org",
              "ID": "CVE-2006-5912",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "n/a",
                          "version": {
                            "version_data": [
                              {
                                "version_value": "n/a"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "n/a"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "Unspecified vulnerability in Campware Campsite before 2.6.2 has unknown impact and attack vectors, related to a \"Security fix for you-know-what,\" possibly related to encrypted passwords."
                }
              ]
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "n/a"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "http://code.campware.org/projects/campsite/ticket/2344",
                  "refsource": "CONFIRM",
                  "url": "http://code.campware.org/projects/campsite/ticket/2344"
                },
                {
                  "name": "http://sourceforge.net/project/shownotes.php?release_id=459574\u0026group_id=66936",
                  "refsource": "CONFIRM",
                  "url": "http://sourceforge.net/project/shownotes.php?release_id=459574\u0026group_id=66936"
                },
                {
                  "name": "http://code.campware.org/projects/campsite/query?milestone=2.6.2",
                  "refsource": "CONFIRM",
                  "url": "http://code.campware.org/projects/campsite/query?milestone=2.6.2"
                },
                {
                  "name": "http://code.campware.org/projects/campsite/changeset/6042",
                  "refsource": "CONFIRM",
                  "url": "http://code.campware.org/projects/campsite/changeset/6042"
                },
                {
                  "name": "http://code.campware.org/projects/campsite/changeset/6041",
                  "refsource": "CONFIRM",
                  "url": "http://code.campware.org/projects/campsite/changeset/6041"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "assignerShortName": "mitre",
        "cveId": "CVE-2006-5912",
        "datePublished": "2006-11-15T15:00:00.000Z",
        "dateReserved": "2006-11-15T00:00:00.000Z",
        "dateUpdated": "2024-09-16T18:04:11.946Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2005-4661 (GCVE-0-2005-4661)

    Vulnerability from nvd – Published: 2006-01-16 21:00 – Updated: 2024-08-07 23:53
    VLAI
    Summary
    The notifyendsubs cron job in Campsite before 2.3.3 sends an e-mail message containing a certain unencrypted MySQL password, which allows remote attackers to sniff the password.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    mitre CNA under the mitre root
    CNA scorecard E 27/100 over 2319 records in the last 180 days details
    References
    URL Tags
    http://sourceforge.net/project/shownotes.php?rele… x_refsource_CONFIRM
    https://exchange.xforce.ibmcloud.com/vulnerabilit… vdb-entryx_refsource_XF
    http://www.osvdb.org/20698 vdb-entryx_refsource_OSVDB
    http://secunia.com/advisories/17528 third-party-advisoryx_refsource_SECUNIA
    Date Public
    2005-10-31 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-07T23:53:28.454Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://sourceforge.net/project/shownotes.php?release_id=367403\u0026group_id=66936"
              },
              {
                "name": "campsite-notifyendsubs-plaintext-password(23106)",
                "tags": [
                  "vdb-entry",
                  "x_refsource_XF",
                  "x_transferred"
                ],
                "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/23106"
              },
              {
                "name": "20698",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://www.osvdb.org/20698"
              },
              {
                "name": "17528",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/17528"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "n/a",
              "vendor": "n/a",
              "versions": [
                {
                  "status": "affected",
                  "version": "n/a"
                }
              ]
            }
          ],
          "datePublic": "2005-10-31T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "The notifyendsubs cron job in Campsite before 2.3.3 sends an e-mail message containing a certain unencrypted MySQL password, which allows remote attackers to sniff the password."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "n/a",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2017-07-19T15:57:01.000Z",
            "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            "shortName": "mitre"
          },
          "references": [
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://sourceforge.net/project/shownotes.php?release_id=367403\u0026group_id=66936"
            },
            {
              "name": "campsite-notifyendsubs-plaintext-password(23106)",
              "tags": [
                "vdb-entry",
                "x_refsource_XF"
              ],
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/23106"
            },
            {
              "name": "20698",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://www.osvdb.org/20698"
            },
            {
              "name": "17528",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/17528"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "cve@mitre.org",
              "ID": "CVE-2005-4661",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "n/a",
                          "version": {
                            "version_data": [
                              {
                                "version_value": "n/a"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "n/a"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "The notifyendsubs cron job in Campsite before 2.3.3 sends an e-mail message containing a certain unencrypted MySQL password, which allows remote attackers to sniff the password."
                }
              ]
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "n/a"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "http://sourceforge.net/project/shownotes.php?release_id=367403\u0026group_id=66936",
                  "refsource": "CONFIRM",
                  "url": "http://sourceforge.net/project/shownotes.php?release_id=367403\u0026group_id=66936"
                },
                {
                  "name": "campsite-notifyendsubs-plaintext-password(23106)",
                  "refsource": "XF",
                  "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/23106"
                },
                {
                  "name": "20698",
                  "refsource": "OSVDB",
                  "url": "http://www.osvdb.org/20698"
                },
                {
                  "name": "17528",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/17528"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "assignerShortName": "mitre",
        "cveId": "CVE-2005-4661",
        "datePublished": "2006-01-16T21:00:00.000Z",
        "dateReserved": "2006-01-16T00:00:00.000Z",
        "dateUpdated": "2024-08-07T23:53:28.454Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2010-1867 (GCVE-0-2010-1867)

    Vulnerability from cvelistv5 – Published: 2010-05-07 22:00 – Updated: 2024-08-07 01:35
    VLAI
    Summary
    SQL injection vulnerability in the ArticleAttachment::GetAttachmentsByArticleNumber method in javascript/tinymcs/plugins/campsiteattachment/attachments.php in Campsite 3.3.5 and earlier allows remote attackers to execute arbitrary SQL commands via the article_id parameter.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    mitre CNA under the mitre root
    CNA scorecard E 27/100 over 2319 records in the last 180 days details
    References
    URL Tags
    http://osvdb.org/64215 vdb-entryx_refsource_OSVDB
    https://exchange.xforce.ibmcloud.com/vulnerabilit… vdb-entryx_refsource_XF
    http://secunia.com/advisories/39580 third-party-advisoryx_refsource_SECUNIA
    http://www.campware.org/en/camp/campsite_news/832/ x_refsource_CONFIRM
    http://php-security.org/2010/05/01/mops-2010-002-… x_refsource_MISC
    http://www.securityfocus.com/bid/39862 vdb-entryx_refsource_BID
    Date Public
    2010-05-01 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-07T01:35:53.857Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "name": "64215",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://osvdb.org/64215"
              },
              {
                "name": "campsite-articleid-sql-injection(58285)",
                "tags": [
                  "vdb-entry",
                  "x_refsource_XF",
                  "x_transferred"
                ],
                "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/58285"
              },
              {
                "name": "39580",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/39580"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://www.campware.org/en/camp/campsite_news/832/"
              },
              {
                "tags": [
                  "x_refsource_MISC",
                  "x_transferred"
                ],
                "url": "http://php-security.org/2010/05/01/mops-2010-002-campsite-tinymce-article-attachment-sql-injection-vulnerability/index.html"
              },
              {
                "name": "39862",
                "tags": [
                  "vdb-entry",
                  "x_refsource_BID",
                  "x_transferred"
                ],
                "url": "http://www.securityfocus.com/bid/39862"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "n/a",
              "vendor": "n/a",
              "versions": [
                {
                  "status": "affected",
                  "version": "n/a"
                }
              ]
            }
          ],
          "datePublic": "2010-05-01T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "SQL injection vulnerability in the ArticleAttachment::GetAttachmentsByArticleNumber method in javascript/tinymcs/plugins/campsiteattachment/attachments.php in Campsite 3.3.5 and earlier allows remote attackers to execute arbitrary SQL commands via the article_id parameter."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "n/a",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2017-08-16T14:57:01.000Z",
            "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            "shortName": "mitre"
          },
          "references": [
            {
              "name": "64215",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://osvdb.org/64215"
            },
            {
              "name": "campsite-articleid-sql-injection(58285)",
              "tags": [
                "vdb-entry",
                "x_refsource_XF"
              ],
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/58285"
            },
            {
              "name": "39580",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/39580"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://www.campware.org/en/camp/campsite_news/832/"
            },
            {
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "http://php-security.org/2010/05/01/mops-2010-002-campsite-tinymce-article-attachment-sql-injection-vulnerability/index.html"
            },
            {
              "name": "39862",
              "tags": [
                "vdb-entry",
                "x_refsource_BID"
              ],
              "url": "http://www.securityfocus.com/bid/39862"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "cve@mitre.org",
              "ID": "CVE-2010-1867",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "n/a",
                          "version": {
                            "version_data": [
                              {
                                "version_value": "n/a"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "n/a"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "SQL injection vulnerability in the ArticleAttachment::GetAttachmentsByArticleNumber method in javascript/tinymcs/plugins/campsiteattachment/attachments.php in Campsite 3.3.5 and earlier allows remote attackers to execute arbitrary SQL commands via the article_id parameter."
                }
              ]
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "n/a"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "64215",
                  "refsource": "OSVDB",
                  "url": "http://osvdb.org/64215"
                },
                {
                  "name": "campsite-articleid-sql-injection(58285)",
                  "refsource": "XF",
                  "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/58285"
                },
                {
                  "name": "39580",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/39580"
                },
                {
                  "name": "http://www.campware.org/en/camp/campsite_news/832/",
                  "refsource": "CONFIRM",
                  "url": "http://www.campware.org/en/camp/campsite_news/832/"
                },
                {
                  "name": "http://php-security.org/2010/05/01/mops-2010-002-campsite-tinymce-article-attachment-sql-injection-vulnerability/index.html",
                  "refsource": "MISC",
                  "url": "http://php-security.org/2010/05/01/mops-2010-002-campsite-tinymce-article-attachment-sql-injection-vulnerability/index.html"
                },
                {
                  "name": "39862",
                  "refsource": "BID",
                  "url": "http://www.securityfocus.com/bid/39862"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "assignerShortName": "mitre",
        "cveId": "CVE-2010-1867",
        "datePublished": "2010-05-07T22:00:00.000Z",
        "dateReserved": "2010-05-07T00:00:00.000Z",
        "dateUpdated": "2024-08-07T01:35:53.857Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2009-2181 (GCVE-0-2009-2181)

    Vulnerability from cvelistv5 – Published: 2009-06-23 21:21 – Updated: 2024-08-07 05:44
    VLAI
    Summary
    Cross-site scripting (XSS) vulnerability in admin-files/templates/list_dir.php in Campsite 3.3.0 RC1 allows remote attackers to inject arbitrary web script or HTML via the listbasedir parameter.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    mitre CNA under the mitre root
    CNA scorecard E 27/100 over 2319 records in the last 180 days details
    References
    URL Tags
    https://www.exploit-db.com/exploits/8995 exploitx_refsource_EXPLOIT-DB
    http://osvdb.org/55313 vdb-entryx_refsource_OSVDB
    Date Public
    2009-06-22 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-07T05:44:55.155Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "name": "8995",
                "tags": [
                  "exploit",
                  "x_refsource_EXPLOIT-DB",
                  "x_transferred"
                ],
                "url": "https://www.exploit-db.com/exploits/8995"
              },
              {
                "name": "55313",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://osvdb.org/55313"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "n/a",
              "vendor": "n/a",
              "versions": [
                {
                  "status": "affected",
                  "version": "n/a"
                }
              ]
            }
          ],
          "datePublic": "2009-06-22T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "Cross-site scripting (XSS) vulnerability in admin-files/templates/list_dir.php in Campsite 3.3.0 RC1 allows remote attackers to inject arbitrary web script or HTML via the listbasedir parameter."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "n/a",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2017-09-28T12:57:01.000Z",
            "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            "shortName": "mitre"
          },
          "references": [
            {
              "name": "8995",
              "tags": [
                "exploit",
                "x_refsource_EXPLOIT-DB"
              ],
              "url": "https://www.exploit-db.com/exploits/8995"
            },
            {
              "name": "55313",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://osvdb.org/55313"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "cve@mitre.org",
              "ID": "CVE-2009-2181",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "n/a",
                          "version": {
                            "version_data": [
                              {
                                "version_value": "n/a"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "n/a"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "Cross-site scripting (XSS) vulnerability in admin-files/templates/list_dir.php in Campsite 3.3.0 RC1 allows remote attackers to inject arbitrary web script or HTML via the listbasedir parameter."
                }
              ]
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "n/a"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "8995",
                  "refsource": "EXPLOIT-DB",
                  "url": "https://www.exploit-db.com/exploits/8995"
                },
                {
                  "name": "55313",
                  "refsource": "OSVDB",
                  "url": "http://osvdb.org/55313"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "assignerShortName": "mitre",
        "cveId": "CVE-2009-2181",
        "datePublished": "2009-06-23T21:21:00.000Z",
        "dateReserved": "2009-06-23T00:00:00.000Z",
        "dateUpdated": "2024-08-07T05:44:55.155Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2009-2182 (GCVE-0-2009-2182)

    Vulnerability from cvelistv5 – Published: 2009-06-23 21:21 – Updated: 2024-08-07 05:44
    VLAI
    Summary
    Multiple PHP remote file inclusion vulnerabilities in Campsite 3.3.0 RC1 allow remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[g_campsiteDir] parameter to (1) ad_popup.php, (2) camp_html.php, (3) init_content.php, (4) logout.php, (5) menu.php, and (6) set-author.php in admin-files/; (7) conf/liveuser_configuration.php; (8) include/phorum_load.php; (9) CommandProcessor.php and (10) index.php in admin-files/article_import; and (11) add.php, (12) add_move.php, (13) autopublish.php, and (14) autopublish_del.php in admin-files/articles/.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    mitre CNA under the mitre root
    CNA scorecard E 27/100 over 2319 records in the last 180 days details
    References
    URL Tags
    https://www.exploit-db.com/exploits/8995 exploitx_refsource_EXPLOIT-DB
    Date Public
    2009-06-22 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-07T05:44:55.290Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "name": "8995",
                "tags": [
                  "exploit",
                  "x_refsource_EXPLOIT-DB",
                  "x_transferred"
                ],
                "url": "https://www.exploit-db.com/exploits/8995"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "n/a",
              "vendor": "n/a",
              "versions": [
                {
                  "status": "affected",
                  "version": "n/a"
                }
              ]
            }
          ],
          "datePublic": "2009-06-22T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "Multiple PHP remote file inclusion vulnerabilities in Campsite 3.3.0 RC1 allow remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[g_campsiteDir] parameter to (1) ad_popup.php, (2) camp_html.php, (3) init_content.php, (4) logout.php, (5) menu.php, and (6) set-author.php in admin-files/; (7) conf/liveuser_configuration.php; (8) include/phorum_load.php; (9) CommandProcessor.php and (10) index.php in admin-files/article_import; and (11) add.php, (12) add_move.php, (13) autopublish.php, and (14) autopublish_del.php in admin-files/articles/."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "n/a",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2017-09-28T12:57:01.000Z",
            "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            "shortName": "mitre"
          },
          "references": [
            {
              "name": "8995",
              "tags": [
                "exploit",
                "x_refsource_EXPLOIT-DB"
              ],
              "url": "https://www.exploit-db.com/exploits/8995"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "cve@mitre.org",
              "ID": "CVE-2009-2182",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "n/a",
                          "version": {
                            "version_data": [
                              {
                                "version_value": "n/a"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "n/a"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "Multiple PHP remote file inclusion vulnerabilities in Campsite 3.3.0 RC1 allow remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[g_campsiteDir] parameter to (1) ad_popup.php, (2) camp_html.php, (3) init_content.php, (4) logout.php, (5) menu.php, and (6) set-author.php in admin-files/; (7) conf/liveuser_configuration.php; (8) include/phorum_load.php; (9) CommandProcessor.php and (10) index.php in admin-files/article_import; and (11) add.php, (12) add_move.php, (13) autopublish.php, and (14) autopublish_del.php in admin-files/articles/."
                }
              ]
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "n/a"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "8995",
                  "refsource": "EXPLOIT-DB",
                  "url": "https://www.exploit-db.com/exploits/8995"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "assignerShortName": "mitre",
        "cveId": "CVE-2009-2182",
        "datePublished": "2009-06-23T21:21:00.000Z",
        "dateReserved": "2009-06-23T00:00:00.000Z",
        "dateUpdated": "2024-08-07T05:44:55.290Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2009-2183 (GCVE-0-2009-2183)

    Vulnerability from cvelistv5 – Published: 2009-06-23 21:21 – Updated: 2024-08-07 05:44
    VLAI
    Summary
    Directory traversal vulnerability in admin-files/ad.php in Campsite 3.3.0 RC1 allows remote attackers to read and possibly execute arbitrary local files via a .. (dot dot) in the GLOBALS[g_campsiteDir] parameter.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    mitre CNA under the mitre root
    CNA scorecard E 27/100 over 2319 records in the last 180 days details
    References
    URL Tags
    https://www.exploit-db.com/exploits/8995 exploitx_refsource_EXPLOIT-DB
    http://osvdb.org/55312 vdb-entryx_refsource_OSVDB
    Date Public
    2009-06-22 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-07T05:44:55.205Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "name": "8995",
                "tags": [
                  "exploit",
                  "x_refsource_EXPLOIT-DB",
                  "x_transferred"
                ],
                "url": "https://www.exploit-db.com/exploits/8995"
              },
              {
                "name": "55312",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://osvdb.org/55312"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "n/a",
              "vendor": "n/a",
              "versions": [
                {
                  "status": "affected",
                  "version": "n/a"
                }
              ]
            }
          ],
          "datePublic": "2009-06-22T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "Directory traversal vulnerability in admin-files/ad.php in Campsite 3.3.0 RC1 allows remote attackers to read and possibly execute arbitrary local files via a .. (dot dot) in the GLOBALS[g_campsiteDir] parameter."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "n/a",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2017-09-28T12:57:01.000Z",
            "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            "shortName": "mitre"
          },
          "references": [
            {
              "name": "8995",
              "tags": [
                "exploit",
                "x_refsource_EXPLOIT-DB"
              ],
              "url": "https://www.exploit-db.com/exploits/8995"
            },
            {
              "name": "55312",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://osvdb.org/55312"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "cve@mitre.org",
              "ID": "CVE-2009-2183",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "n/a",
                          "version": {
                            "version_data": [
                              {
                                "version_value": "n/a"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "n/a"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "Directory traversal vulnerability in admin-files/ad.php in Campsite 3.3.0 RC1 allows remote attackers to read and possibly execute arbitrary local files via a .. (dot dot) in the GLOBALS[g_campsiteDir] parameter."
                }
              ]
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "n/a"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "8995",
                  "refsource": "EXPLOIT-DB",
                  "url": "https://www.exploit-db.com/exploits/8995"
                },
                {
                  "name": "55312",
                  "refsource": "OSVDB",
                  "url": "http://osvdb.org/55312"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "assignerShortName": "mitre",
        "cveId": "CVE-2009-2183",
        "datePublished": "2009-06-23T21:21:00.000Z",
        "dateReserved": "2009-06-23T00:00:00.000Z",
        "dateUpdated": "2024-08-07T05:44:55.205Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2006-5911 (GCVE-0-2006-5911)

    Vulnerability from cvelistv5 – Published: 2006-11-15 15:00 – Updated: 2024-08-07 20:12
    VLAI
    Summary
    Multiple PHP remote file inclusion vulnerabilities in Campware Campsite before 2.6.2 allow remote attackers to execute arbitrary PHP code via a URL in the g_documentRoot parameter to (1) Alias.php, (2) Article.php, (3) ArticleAttachment.php, (4) ArticleComment.php, (5) ArticleData.php, (6) ArticleImage.php, (7) ArticleIndex.php, (8) ArticlePublish.php, (9) ArticleTopic.php, (10) ArticleType.php, (11) ArticleTypeField.php, (12) Attachment.php, (13) Country.php, (14) DatabaseObject.php, (15) Event.php, (16) IPAccess.php, (17) Image.php, (18) Issue.php, (19) IssuePublish.php, (20) Language.php, (21) Log.php, (22) LoginAttempts.php, (23) Publication.php, (24) Section.php, (25) ShortURL.php, (26) Subscription.php, (27) SubscriptionDefaultTime.php, (28) SubscriptionSection.php, (29) SystemPref.php, (30) Template.php, (31) TimeUnit.php, (32) Topic.php, (33) UrlType.php, (34) User.php, and (35) UserType.php in implementation/management/classes/; (36) configuration.php and (37) db_connect.php in implementation/management/; and (38) LocalizerConfig.php and (39) LocalizerLanguage.php in implementation/management/priv/localizer/.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    mitre CNA under the mitre root
    CNA scorecard E 27/100 over 2319 records in the last 180 days details
    References
    URL Tags
    http://www.osvdb.org/34217 vdb-entryx_refsource_OSVDB
    http://www.osvdb.org/34215 vdb-entryx_refsource_OSVDB
    http://www.osvdb.org/34189 vdb-entryx_refsource_OSVDB
    http://www.osvdb.org/34214 vdb-entryx_refsource_OSVDB
    http://sourceforge.net/project/shownotes.php?rele… x_refsource_CONFIRM
    http://www.osvdb.org/34198 vdb-entryx_refsource_OSVDB
    http://www.osvdb.org/34195 vdb-entryx_refsource_OSVDB
    http://www.osvdb.org/34205 vdb-entryx_refsource_OSVDB
    http://www.osvdb.org/34187 vdb-entryx_refsource_OSVDB
    http://www.osvdb.org/34208 vdb-entryx_refsource_OSVDB
    http://www.osvdb.org/34216 vdb-entryx_refsource_OSVDB
    http://code.campware.org/projects/campsite/ticket/2349 x_refsource_CONFIRM
    http://www.osvdb.org/34224 vdb-entryx_refsource_OSVDB
    http://code.campware.org/projects/campsite/query?… x_refsource_CONFIRM
    http://www.osvdb.org/34197 vdb-entryx_refsource_OSVDB
    http://www.osvdb.org/34221 vdb-entryx_refsource_OSVDB
    http://www.osvdb.org/34213 vdb-entryx_refsource_OSVDB
    http://www.osvdb.org/34209 vdb-entryx_refsource_OSVDB
    http://www.osvdb.org/34211 vdb-entryx_refsource_OSVDB
    http://www.osvdb.org/34191 vdb-entryx_refsource_OSVDB
    http://code.campware.org/projects/campsite/change… x_refsource_CONFIRM
    http://www.osvdb.org/34225 vdb-entryx_refsource_OSVDB
    http://www.osvdb.org/34203 vdb-entryx_refsource_OSVDB
    http://www.osvdb.org/34200 vdb-entryx_refsource_OSVDB
    http://www.osvdb.org/34222 vdb-entryx_refsource_OSVDB
    http://www.osvdb.org/34223 vdb-entryx_refsource_OSVDB
    http://www.osvdb.org/34218 vdb-entryx_refsource_OSVDB
    http://www.osvdb.org/34206 vdb-entryx_refsource_OSVDB
    http://www.osvdb.org/34199 vdb-entryx_refsource_OSVDB
    http://www.osvdb.org/34196 vdb-entryx_refsource_OSVDB
    http://www.osvdb.org/34219 vdb-entryx_refsource_OSVDB
    http://www.osvdb.org/34201 vdb-entryx_refsource_OSVDB
    http://www.securityfocus.com/bid/23874 vdb-entryx_refsource_BID
    http://www.osvdb.org/34192 vdb-entryx_refsource_OSVDB
    http://www.osvdb.org/34210 vdb-entryx_refsource_OSVDB
    http://www.osvdb.org/34188 vdb-entryx_refsource_OSVDB
    http://www.osvdb.org/34204 vdb-entryx_refsource_OSVDB
    http://www.osvdb.org/34202 vdb-entryx_refsource_OSVDB
    http://www.osvdb.org/34190 vdb-entryx_refsource_OSVDB
    http://code.campware.org/projects/campsite/change… x_refsource_CONFIRM
    http://www.osvdb.org/34220 vdb-entryx_refsource_OSVDB
    http://www.osvdb.org/34207 vdb-entryx_refsource_OSVDB
    http://www.osvdb.org/34193 vdb-entryx_refsource_OSVDB
    http://www.osvdb.org/34194 vdb-entryx_refsource_OSVDB
    http://www.osvdb.org/34212 vdb-entryx_refsource_OSVDB
    Date Public
    2006-10-19 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-07T20:12:30.660Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "name": "34217",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://www.osvdb.org/34217"
              },
              {
                "name": "34215",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://www.osvdb.org/34215"
              },
              {
                "name": "34189",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://www.osvdb.org/34189"
              },
              {
                "name": "34214",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://www.osvdb.org/34214"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://sourceforge.net/project/shownotes.php?release_id=459574\u0026group_id=66936"
              },
              {
                "name": "34198",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://www.osvdb.org/34198"
              },
              {
                "name": "34195",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://www.osvdb.org/34195"
              },
              {
                "name": "34205",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://www.osvdb.org/34205"
              },
              {
                "name": "34187",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://www.osvdb.org/34187"
              },
              {
                "name": "34208",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://www.osvdb.org/34208"
              },
              {
                "name": "34216",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://www.osvdb.org/34216"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://code.campware.org/projects/campsite/ticket/2349"
              },
              {
                "name": "34224",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://www.osvdb.org/34224"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://code.campware.org/projects/campsite/query?milestone=2.6.2"
              },
              {
                "name": "34197",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://www.osvdb.org/34197"
              },
              {
                "name": "34221",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://www.osvdb.org/34221"
              },
              {
                "name": "34213",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://www.osvdb.org/34213"
              },
              {
                "name": "34209",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://www.osvdb.org/34209"
              },
              {
                "name": "34211",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://www.osvdb.org/34211"
              },
              {
                "name": "34191",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://www.osvdb.org/34191"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://code.campware.org/projects/campsite/changeset/6057"
              },
              {
                "name": "34225",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://www.osvdb.org/34225"
              },
              {
                "name": "34203",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://www.osvdb.org/34203"
              },
              {
                "name": "34200",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://www.osvdb.org/34200"
              },
              {
                "name": "34222",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://www.osvdb.org/34222"
              },
              {
                "name": "34223",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://www.osvdb.org/34223"
              },
              {
                "name": "34218",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://www.osvdb.org/34218"
              },
              {
                "name": "34206",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://www.osvdb.org/34206"
              },
              {
                "name": "34199",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://www.osvdb.org/34199"
              },
              {
                "name": "34196",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://www.osvdb.org/34196"
              },
              {
                "name": "34219",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://www.osvdb.org/34219"
              },
              {
                "name": "34201",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://www.osvdb.org/34201"
              },
              {
                "name": "23874",
                "tags": [
                  "vdb-entry",
                  "x_refsource_BID",
                  "x_transferred"
                ],
                "url": "http://www.securityfocus.com/bid/23874"
              },
              {
                "name": "34192",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://www.osvdb.org/34192"
              },
              {
                "name": "34210",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://www.osvdb.org/34210"
              },
              {
                "name": "34188",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://www.osvdb.org/34188"
              },
              {
                "name": "34204",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://www.osvdb.org/34204"
              },
              {
                "name": "34202",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://www.osvdb.org/34202"
              },
              {
                "name": "34190",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://www.osvdb.org/34190"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://code.campware.org/projects/campsite/changeset/6058"
              },
              {
                "name": "34220",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://www.osvdb.org/34220"
              },
              {
                "name": "34207",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://www.osvdb.org/34207"
              },
              {
                "name": "34193",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://www.osvdb.org/34193"
              },
              {
                "name": "34194",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://www.osvdb.org/34194"
              },
              {
                "name": "34212",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://www.osvdb.org/34212"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "n/a",
              "vendor": "n/a",
              "versions": [
                {
                  "status": "affected",
                  "version": "n/a"
                }
              ]
            }
          ],
          "datePublic": "2006-10-19T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "Multiple PHP remote file inclusion vulnerabilities in Campware Campsite before 2.6.2 allow remote attackers to execute arbitrary PHP code via a URL in the g_documentRoot parameter to (1) Alias.php, (2) Article.php, (3) ArticleAttachment.php, (4) ArticleComment.php, (5) ArticleData.php, (6) ArticleImage.php, (7) ArticleIndex.php, (8) ArticlePublish.php, (9) ArticleTopic.php, (10) ArticleType.php, (11) ArticleTypeField.php, (12) Attachment.php, (13) Country.php, (14) DatabaseObject.php, (15) Event.php, (16) IPAccess.php, (17) Image.php, (18) Issue.php, (19) IssuePublish.php, (20) Language.php, (21) Log.php, (22) LoginAttempts.php, (23) Publication.php, (24) Section.php, (25) ShortURL.php, (26) Subscription.php, (27) SubscriptionDefaultTime.php, (28) SubscriptionSection.php, (29) SystemPref.php, (30) Template.php, (31) TimeUnit.php, (32) Topic.php, (33) UrlType.php, (34) User.php, and (35) UserType.php in implementation/management/classes/; (36) configuration.php and (37) db_connect.php in implementation/management/; and (38) LocalizerConfig.php and (39) LocalizerLanguage.php in implementation/management/priv/localizer/."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "n/a",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2007-05-10T09:00:00.000Z",
            "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            "shortName": "mitre"
          },
          "references": [
            {
              "name": "34217",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://www.osvdb.org/34217"
            },
            {
              "name": "34215",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://www.osvdb.org/34215"
            },
            {
              "name": "34189",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://www.osvdb.org/34189"
            },
            {
              "name": "34214",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://www.osvdb.org/34214"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://sourceforge.net/project/shownotes.php?release_id=459574\u0026group_id=66936"
            },
            {
              "name": "34198",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://www.osvdb.org/34198"
            },
            {
              "name": "34195",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://www.osvdb.org/34195"
            },
            {
              "name": "34205",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://www.osvdb.org/34205"
            },
            {
              "name": "34187",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://www.osvdb.org/34187"
            },
            {
              "name": "34208",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://www.osvdb.org/34208"
            },
            {
              "name": "34216",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://www.osvdb.org/34216"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://code.campware.org/projects/campsite/ticket/2349"
            },
            {
              "name": "34224",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://www.osvdb.org/34224"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://code.campware.org/projects/campsite/query?milestone=2.6.2"
            },
            {
              "name": "34197",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://www.osvdb.org/34197"
            },
            {
              "name": "34221",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://www.osvdb.org/34221"
            },
            {
              "name": "34213",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://www.osvdb.org/34213"
            },
            {
              "name": "34209",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://www.osvdb.org/34209"
            },
            {
              "name": "34211",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://www.osvdb.org/34211"
            },
            {
              "name": "34191",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://www.osvdb.org/34191"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://code.campware.org/projects/campsite/changeset/6057"
            },
            {
              "name": "34225",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://www.osvdb.org/34225"
            },
            {
              "name": "34203",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://www.osvdb.org/34203"
            },
            {
              "name": "34200",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://www.osvdb.org/34200"
            },
            {
              "name": "34222",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://www.osvdb.org/34222"
            },
            {
              "name": "34223",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://www.osvdb.org/34223"
            },
            {
              "name": "34218",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://www.osvdb.org/34218"
            },
            {
              "name": "34206",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://www.osvdb.org/34206"
            },
            {
              "name": "34199",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://www.osvdb.org/34199"
            },
            {
              "name": "34196",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://www.osvdb.org/34196"
            },
            {
              "name": "34219",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://www.osvdb.org/34219"
            },
            {
              "name": "34201",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://www.osvdb.org/34201"
            },
            {
              "name": "23874",
              "tags": [
                "vdb-entry",
                "x_refsource_BID"
              ],
              "url": "http://www.securityfocus.com/bid/23874"
            },
            {
              "name": "34192",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://www.osvdb.org/34192"
            },
            {
              "name": "34210",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://www.osvdb.org/34210"
            },
            {
              "name": "34188",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://www.osvdb.org/34188"
            },
            {
              "name": "34204",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://www.osvdb.org/34204"
            },
            {
              "name": "34202",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://www.osvdb.org/34202"
            },
            {
              "name": "34190",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://www.osvdb.org/34190"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://code.campware.org/projects/campsite/changeset/6058"
            },
            {
              "name": "34220",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://www.osvdb.org/34220"
            },
            {
              "name": "34207",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://www.osvdb.org/34207"
            },
            {
              "name": "34193",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://www.osvdb.org/34193"
            },
            {
              "name": "34194",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://www.osvdb.org/34194"
            },
            {
              "name": "34212",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://www.osvdb.org/34212"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "cve@mitre.org",
              "ID": "CVE-2006-5911",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "n/a",
                          "version": {
                            "version_data": [
                              {
                                "version_value": "n/a"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "n/a"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "Multiple PHP remote file inclusion vulnerabilities in Campware Campsite before 2.6.2 allow remote attackers to execute arbitrary PHP code via a URL in the g_documentRoot parameter to (1) Alias.php, (2) Article.php, (3) ArticleAttachment.php, (4) ArticleComment.php, (5) ArticleData.php, (6) ArticleImage.php, (7) ArticleIndex.php, (8) ArticlePublish.php, (9) ArticleTopic.php, (10) ArticleType.php, (11) ArticleTypeField.php, (12) Attachment.php, (13) Country.php, (14) DatabaseObject.php, (15) Event.php, (16) IPAccess.php, (17) Image.php, (18) Issue.php, (19) IssuePublish.php, (20) Language.php, (21) Log.php, (22) LoginAttempts.php, (23) Publication.php, (24) Section.php, (25) ShortURL.php, (26) Subscription.php, (27) SubscriptionDefaultTime.php, (28) SubscriptionSection.php, (29) SystemPref.php, (30) Template.php, (31) TimeUnit.php, (32) Topic.php, (33) UrlType.php, (34) User.php, and (35) UserType.php in implementation/management/classes/; (36) configuration.php and (37) db_connect.php in implementation/management/; and (38) LocalizerConfig.php and (39) LocalizerLanguage.php in implementation/management/priv/localizer/."
                }
              ]
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "n/a"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "34217",
                  "refsource": "OSVDB",
                  "url": "http://www.osvdb.org/34217"
                },
                {
                  "name": "34215",
                  "refsource": "OSVDB",
                  "url": "http://www.osvdb.org/34215"
                },
                {
                  "name": "34189",
                  "refsource": "OSVDB",
                  "url": "http://www.osvdb.org/34189"
                },
                {
                  "name": "34214",
                  "refsource": "OSVDB",
                  "url": "http://www.osvdb.org/34214"
                },
                {
                  "name": "http://sourceforge.net/project/shownotes.php?release_id=459574\u0026group_id=66936",
                  "refsource": "CONFIRM",
                  "url": "http://sourceforge.net/project/shownotes.php?release_id=459574\u0026group_id=66936"
                },
                {
                  "name": "34198",
                  "refsource": "OSVDB",
                  "url": "http://www.osvdb.org/34198"
                },
                {
                  "name": "34195",
                  "refsource": "OSVDB",
                  "url": "http://www.osvdb.org/34195"
                },
                {
                  "name": "34205",
                  "refsource": "OSVDB",
                  "url": "http://www.osvdb.org/34205"
                },
                {
                  "name": "34187",
                  "refsource": "OSVDB",
                  "url": "http://www.osvdb.org/34187"
                },
                {
                  "name": "34208",
                  "refsource": "OSVDB",
                  "url": "http://www.osvdb.org/34208"
                },
                {
                  "name": "34216",
                  "refsource": "OSVDB",
                  "url": "http://www.osvdb.org/34216"
                },
                {
                  "name": "http://code.campware.org/projects/campsite/ticket/2349",
                  "refsource": "CONFIRM",
                  "url": "http://code.campware.org/projects/campsite/ticket/2349"
                },
                {
                  "name": "34224",
                  "refsource": "OSVDB",
                  "url": "http://www.osvdb.org/34224"
                },
                {
                  "name": "http://code.campware.org/projects/campsite/query?milestone=2.6.2",
                  "refsource": "CONFIRM",
                  "url": "http://code.campware.org/projects/campsite/query?milestone=2.6.2"
                },
                {
                  "name": "34197",
                  "refsource": "OSVDB",
                  "url": "http://www.osvdb.org/34197"
                },
                {
                  "name": "34221",
                  "refsource": "OSVDB",
                  "url": "http://www.osvdb.org/34221"
                },
                {
                  "name": "34213",
                  "refsource": "OSVDB",
                  "url": "http://www.osvdb.org/34213"
                },
                {
                  "name": "34209",
                  "refsource": "OSVDB",
                  "url": "http://www.osvdb.org/34209"
                },
                {
                  "name": "34211",
                  "refsource": "OSVDB",
                  "url": "http://www.osvdb.org/34211"
                },
                {
                  "name": "34191",
                  "refsource": "OSVDB",
                  "url": "http://www.osvdb.org/34191"
                },
                {
                  "name": "http://code.campware.org/projects/campsite/changeset/6057",
                  "refsource": "CONFIRM",
                  "url": "http://code.campware.org/projects/campsite/changeset/6057"
                },
                {
                  "name": "34225",
                  "refsource": "OSVDB",
                  "url": "http://www.osvdb.org/34225"
                },
                {
                  "name": "34203",
                  "refsource": "OSVDB",
                  "url": "http://www.osvdb.org/34203"
                },
                {
                  "name": "34200",
                  "refsource": "OSVDB",
                  "url": "http://www.osvdb.org/34200"
                },
                {
                  "name": "34222",
                  "refsource": "OSVDB",
                  "url": "http://www.osvdb.org/34222"
                },
                {
                  "name": "34223",
                  "refsource": "OSVDB",
                  "url": "http://www.osvdb.org/34223"
                },
                {
                  "name": "34218",
                  "refsource": "OSVDB",
                  "url": "http://www.osvdb.org/34218"
                },
                {
                  "name": "34206",
                  "refsource": "OSVDB",
                  "url": "http://www.osvdb.org/34206"
                },
                {
                  "name": "34199",
                  "refsource": "OSVDB",
                  "url": "http://www.osvdb.org/34199"
                },
                {
                  "name": "34196",
                  "refsource": "OSVDB",
                  "url": "http://www.osvdb.org/34196"
                },
                {
                  "name": "34219",
                  "refsource": "OSVDB",
                  "url": "http://www.osvdb.org/34219"
                },
                {
                  "name": "34201",
                  "refsource": "OSVDB",
                  "url": "http://www.osvdb.org/34201"
                },
                {
                  "name": "23874",
                  "refsource": "BID",
                  "url": "http://www.securityfocus.com/bid/23874"
                },
                {
                  "name": "34192",
                  "refsource": "OSVDB",
                  "url": "http://www.osvdb.org/34192"
                },
                {
                  "name": "34210",
                  "refsource": "OSVDB",
                  "url": "http://www.osvdb.org/34210"
                },
                {
                  "name": "34188",
                  "refsource": "OSVDB",
                  "url": "http://www.osvdb.org/34188"
                },
                {
                  "name": "34204",
                  "refsource": "OSVDB",
                  "url": "http://www.osvdb.org/34204"
                },
                {
                  "name": "34202",
                  "refsource": "OSVDB",
                  "url": "http://www.osvdb.org/34202"
                },
                {
                  "name": "34190",
                  "refsource": "OSVDB",
                  "url": "http://www.osvdb.org/34190"
                },
                {
                  "name": "http://code.campware.org/projects/campsite/changeset/6058",
                  "refsource": "CONFIRM",
                  "url": "http://code.campware.org/projects/campsite/changeset/6058"
                },
                {
                  "name": "34220",
                  "refsource": "OSVDB",
                  "url": "http://www.osvdb.org/34220"
                },
                {
                  "name": "34207",
                  "refsource": "OSVDB",
                  "url": "http://www.osvdb.org/34207"
                },
                {
                  "name": "34193",
                  "refsource": "OSVDB",
                  "url": "http://www.osvdb.org/34193"
                },
                {
                  "name": "34194",
                  "refsource": "OSVDB",
                  "url": "http://www.osvdb.org/34194"
                },
                {
                  "name": "34212",
                  "refsource": "OSVDB",
                  "url": "http://www.osvdb.org/34212"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "assignerShortName": "mitre",
        "cveId": "CVE-2006-5911",
        "datePublished": "2006-11-15T15:00:00.000Z",
        "dateReserved": "2006-11-15T00:00:00.000Z",
        "dateUpdated": "2024-08-07T20:12:30.660Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2006-5910 (GCVE-0-2006-5910)

    Vulnerability from cvelistv5 – Published: 2006-11-15 15:00 – Updated: 2024-08-07 20:12
    VLAI
    Summary
    Multiple PHP remote file inclusion vulnerabilities in Campware Campsite before 20061110 allow remote attackers to execute arbitrary PHP code via a URL in the g_documentRoot parameter to (1) bugreporter/thankyou.php and (2) feedback/thankyou.php in implementation/management/priv/.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    mitre CNA under the mitre root
    CNA scorecard E 27/100 over 2319 records in the last 180 days details
    Date Public
    2006-10-16 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-07T20:12:30.515Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "name": "ADV-2006-4776",
                "tags": [
                  "vdb-entry",
                  "x_refsource_VUPEN",
                  "x_transferred"
                ],
                "url": "http://www.vupen.com/english/advisories/2006/4776"
              },
              {
                "name": "20519",
                "tags": [
                  "vdb-entry",
                  "x_refsource_BID",
                  "x_transferred"
                ],
                "url": "http://www.securityfocus.com/bid/20519"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://code.campware.org/projects/campsite/changeset/6119"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://code.campware.org/projects/campsite/ticket/2363"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://code.campware.org/projects/campsite/changeset/6118"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "n/a",
              "vendor": "n/a",
              "versions": [
                {
                  "status": "affected",
                  "version": "n/a"
                }
              ]
            }
          ],
          "datePublic": "2006-10-16T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "Multiple PHP remote file inclusion vulnerabilities in Campware Campsite before 20061110 allow remote attackers to execute arbitrary PHP code via a URL in the g_documentRoot parameter to (1) bugreporter/thankyou.php and (2) feedback/thankyou.php in implementation/management/priv/."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "n/a",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2006-12-08T10:00:00.000Z",
            "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            "shortName": "mitre"
          },
          "references": [
            {
              "name": "ADV-2006-4776",
              "tags": [
                "vdb-entry",
                "x_refsource_VUPEN"
              ],
              "url": "http://www.vupen.com/english/advisories/2006/4776"
            },
            {
              "name": "20519",
              "tags": [
                "vdb-entry",
                "x_refsource_BID"
              ],
              "url": "http://www.securityfocus.com/bid/20519"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://code.campware.org/projects/campsite/changeset/6119"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://code.campware.org/projects/campsite/ticket/2363"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://code.campware.org/projects/campsite/changeset/6118"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "cve@mitre.org",
              "ID": "CVE-2006-5910",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "n/a",
                          "version": {
                            "version_data": [
                              {
                                "version_value": "n/a"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "n/a"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "Multiple PHP remote file inclusion vulnerabilities in Campware Campsite before 20061110 allow remote attackers to execute arbitrary PHP code via a URL in the g_documentRoot parameter to (1) bugreporter/thankyou.php and (2) feedback/thankyou.php in implementation/management/priv/."
                }
              ]
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "n/a"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "ADV-2006-4776",
                  "refsource": "VUPEN",
                  "url": "http://www.vupen.com/english/advisories/2006/4776"
                },
                {
                  "name": "20519",
                  "refsource": "BID",
                  "url": "http://www.securityfocus.com/bid/20519"
                },
                {
                  "name": "http://code.campware.org/projects/campsite/changeset/6119",
                  "refsource": "CONFIRM",
                  "url": "http://code.campware.org/projects/campsite/changeset/6119"
                },
                {
                  "name": "http://code.campware.org/projects/campsite/ticket/2363",
                  "refsource": "CONFIRM",
                  "url": "http://code.campware.org/projects/campsite/ticket/2363"
                },
                {
                  "name": "http://code.campware.org/projects/campsite/changeset/6118",
                  "refsource": "CONFIRM",
                  "url": "http://code.campware.org/projects/campsite/changeset/6118"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "assignerShortName": "mitre",
        "cveId": "CVE-2006-5910",
        "datePublished": "2006-11-15T15:00:00.000Z",
        "dateReserved": "2006-11-15T00:00:00.000Z",
        "dateUpdated": "2024-08-07T20:12:30.515Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2006-5912 (GCVE-0-2006-5912)

    Vulnerability from cvelistv5 – Published: 2006-11-15 15:00 – Updated: 2024-09-16 18:04
    VLAI
    Summary
    Unspecified vulnerability in Campware Campsite before 2.6.2 has unknown impact and attack vectors, related to a "Security fix for you-know-what," possibly related to encrypted passwords.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    mitre CNA under the mitre root
    CNA scorecard E 27/100 over 2319 records in the last 180 days details
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-07T20:12:30.333Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://code.campware.org/projects/campsite/ticket/2344"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://sourceforge.net/project/shownotes.php?release_id=459574\u0026group_id=66936"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://code.campware.org/projects/campsite/query?milestone=2.6.2"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://code.campware.org/projects/campsite/changeset/6042"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://code.campware.org/projects/campsite/changeset/6041"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "n/a",
              "vendor": "n/a",
              "versions": [
                {
                  "status": "affected",
                  "version": "n/a"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "Unspecified vulnerability in Campware Campsite before 2.6.2 has unknown impact and attack vectors, related to a \"Security fix for you-know-what,\" possibly related to encrypted passwords."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "n/a",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2006-11-15T15:00:00.000Z",
            "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            "shortName": "mitre"
          },
          "references": [
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://code.campware.org/projects/campsite/ticket/2344"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://sourceforge.net/project/shownotes.php?release_id=459574\u0026group_id=66936"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://code.campware.org/projects/campsite/query?milestone=2.6.2"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://code.campware.org/projects/campsite/changeset/6042"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://code.campware.org/projects/campsite/changeset/6041"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "cve@mitre.org",
              "ID": "CVE-2006-5912",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "n/a",
                          "version": {
                            "version_data": [
                              {
                                "version_value": "n/a"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "n/a"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "Unspecified vulnerability in Campware Campsite before 2.6.2 has unknown impact and attack vectors, related to a \"Security fix for you-know-what,\" possibly related to encrypted passwords."
                }
              ]
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "n/a"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "http://code.campware.org/projects/campsite/ticket/2344",
                  "refsource": "CONFIRM",
                  "url": "http://code.campware.org/projects/campsite/ticket/2344"
                },
                {
                  "name": "http://sourceforge.net/project/shownotes.php?release_id=459574\u0026group_id=66936",
                  "refsource": "CONFIRM",
                  "url": "http://sourceforge.net/project/shownotes.php?release_id=459574\u0026group_id=66936"
                },
                {
                  "name": "http://code.campware.org/projects/campsite/query?milestone=2.6.2",
                  "refsource": "CONFIRM",
                  "url": "http://code.campware.org/projects/campsite/query?milestone=2.6.2"
                },
                {
                  "name": "http://code.campware.org/projects/campsite/changeset/6042",
                  "refsource": "CONFIRM",
                  "url": "http://code.campware.org/projects/campsite/changeset/6042"
                },
                {
                  "name": "http://code.campware.org/projects/campsite/changeset/6041",
                  "refsource": "CONFIRM",
                  "url": "http://code.campware.org/projects/campsite/changeset/6041"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "assignerShortName": "mitre",
        "cveId": "CVE-2006-5912",
        "datePublished": "2006-11-15T15:00:00.000Z",
        "dateReserved": "2006-11-15T00:00:00.000Z",
        "dateUpdated": "2024-09-16T18:04:11.946Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2005-4661 (GCVE-0-2005-4661)

    Vulnerability from cvelistv5 – Published: 2006-01-16 21:00 – Updated: 2024-08-07 23:53
    VLAI
    Summary
    The notifyendsubs cron job in Campsite before 2.3.3 sends an e-mail message containing a certain unencrypted MySQL password, which allows remote attackers to sniff the password.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    mitre CNA under the mitre root
    CNA scorecard E 27/100 over 2319 records in the last 180 days details
    References
    URL Tags
    http://sourceforge.net/project/shownotes.php?rele… x_refsource_CONFIRM
    https://exchange.xforce.ibmcloud.com/vulnerabilit… vdb-entryx_refsource_XF
    http://www.osvdb.org/20698 vdb-entryx_refsource_OSVDB
    http://secunia.com/advisories/17528 third-party-advisoryx_refsource_SECUNIA
    Date Public
    2005-10-31 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-07T23:53:28.454Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://sourceforge.net/project/shownotes.php?release_id=367403\u0026group_id=66936"
              },
              {
                "name": "campsite-notifyendsubs-plaintext-password(23106)",
                "tags": [
                  "vdb-entry",
                  "x_refsource_XF",
                  "x_transferred"
                ],
                "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/23106"
              },
              {
                "name": "20698",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://www.osvdb.org/20698"
              },
              {
                "name": "17528",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/17528"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "n/a",
              "vendor": "n/a",
              "versions": [
                {
                  "status": "affected",
                  "version": "n/a"
                }
              ]
            }
          ],
          "datePublic": "2005-10-31T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "The notifyendsubs cron job in Campsite before 2.3.3 sends an e-mail message containing a certain unencrypted MySQL password, which allows remote attackers to sniff the password."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "n/a",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2017-07-19T15:57:01.000Z",
            "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            "shortName": "mitre"
          },
          "references": [
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://sourceforge.net/project/shownotes.php?release_id=367403\u0026group_id=66936"
            },
            {
              "name": "campsite-notifyendsubs-plaintext-password(23106)",
              "tags": [
                "vdb-entry",
                "x_refsource_XF"
              ],
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/23106"
            },
            {
              "name": "20698",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://www.osvdb.org/20698"
            },
            {
              "name": "17528",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/17528"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "cve@mitre.org",
              "ID": "CVE-2005-4661",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "n/a",
                          "version": {
                            "version_data": [
                              {
                                "version_value": "n/a"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "n/a"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "The notifyendsubs cron job in Campsite before 2.3.3 sends an e-mail message containing a certain unencrypted MySQL password, which allows remote attackers to sniff the password."
                }
              ]
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "n/a"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "http://sourceforge.net/project/shownotes.php?release_id=367403\u0026group_id=66936",
                  "refsource": "CONFIRM",
                  "url": "http://sourceforge.net/project/shownotes.php?release_id=367403\u0026group_id=66936"
                },
                {
                  "name": "campsite-notifyendsubs-plaintext-password(23106)",
                  "refsource": "XF",
                  "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/23106"
                },
                {
                  "name": "20698",
                  "refsource": "OSVDB",
                  "url": "http://www.osvdb.org/20698"
                },
                {
                  "name": "17528",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/17528"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "assignerShortName": "mitre",
        "cveId": "CVE-2005-4661",
        "datePublished": "2006-01-16T21:00:00.000Z",
        "dateReserved": "2006-01-16T00:00:00.000Z",
        "dateUpdated": "2024-08-07T23:53:28.454Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }