CVE-2006-4320

{"id": "CVE-2006-4320", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": true, "userInteractionRequired": false}]}, "published": "2006-08-24T01:04:00.000", "references": [{"url": "http://securitytracker.com/id?1016722", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/archive/1/443745/100/0/threaded", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/19600", "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28479", "source": "cve@mitre.org"}, {"url": "http://securitytracker.com/id?1016722", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/archive/1/443745/100/0/threaded", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/19600", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28479", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "PHP remote file inclusion vulnerability in sef.php in the OpenSEF 2.0.0 component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter."}, {"lang": "es", "value": "Vulnerabilidad de inclusi\u00f3n remota de archivo en PHP en sef.php del componente OpenSEF 2.0.0 para Joomla! permite a atacantes remotos ejecutar c\u00f3digo PHP de su elecci\u00f3n mediante una URL en el par\u00e1metro mosConfig_absolute_path."}], "lastModified": "2025-04-03T01:03:51.193", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:opensef_project:opensef:2.0-beta3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F07C245B-0A41-4ECD-BFEA-DD93BFE160B3"}, {"criteria": "cpe:2.3:a:opensef_project:opensef:2.0_rc1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "944553E5-EAFB-483D-A5A2-9B5C210E7889"}, {"criteria": "cpe:2.3:a:opensef_project:opensef:2.0_rc2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "55893CE1-954B-42D9-B585-4B0FDA3D89CD"}, {"criteria": "cpe:2.3:a:opensef_project:opensef:2.0_rc3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AEA04CD9-D66C-4BD9-9551-8AAE6879514D"}, {"criteria": "cpe:2.3:a:opensef_project:opensef:2.0_rc4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "204AA46F-AA81-4047-8221-FF24B075D38A"}, {"criteria": "cpe:2.3:a:opensef_project:opensef:2.0_rc5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5C8229B1-FDDF-448E-8D9C-CE0D88C5BC47"}, {"criteria": "cpe:2.3:a:opensef_project:opensef:2.0_rc5_sp1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "15695DA9-FA04-437E-B169-19853814B3C9"}, {"criteria": "cpe:2.3:a:opensef_project:opensef:2.0_rc5_sp2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4E4A1A62-AC1E-425B-AAC4-C5A96E7DAF88"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}