CVE-2006-4609

{"id": "CVE-2006-4609", "cveTags": [{"tags": ["disputed"], "sourceIdentifier": "cve@mitre.org"}], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.1, "accessVector": "NETWORK", "vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "HIGH", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 4.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": true, "userInteractionRequired": false}]}, "published": "2006-09-07T00:04:00.000", "references": [{"url": "http://secunia.com/advisories/21590", "source": "cve@mitre.org"}, {"url": "http://securityreason.com/securityalert/1495", "source": "cve@mitre.org"}, {"url": "http://www.osvdb.org/28217", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/archive/1/444076/100/100/threaded", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/archive/1/444220/100/100/threaded", "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2006/3373", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/21590", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://securityreason.com/securityalert/1495", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.osvdb.org/28217", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/archive/1/444076/100/100/threaded", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/archive/1/444220/100/100/threaded", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.vupen.com/english/advisories/2006/3373", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Multiple PHP remote file inclusion vulnerabilities in the Content Management module (\"Content manager\") for PHProjekt 0.6.1, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via the path_pre parameter in (1) cm_lib.inc.php, (2) doc/br.edithelp.php, (3) doc/de.edithelp.php, (4) doc/ct.edithelp.php, (5) userrating.php, and (6) listing.php, a different set of vectors than CVE-2006-4204. NOTE: a third-party researcher has disputed the impact of the cm_lib.inc.php vector, stating that it is limited to local file inclusion. CVE analysis as of 20060905 concurs, although use of ftp URLs is also possible. The remaining five vectors have also been disputed by the same third party, stating that the path_pre variable is initialized before it is used"}, {"lang": "es", "value": "** DISCUTIDA ** M\u00faltiples vulnerabilidades PHP de inclusi\u00f3n remota de archivo en el Content Management module (\"Content manager\") para PHProjekt 0.6.1, cuando register_globals est\u00e1 habilitado, permie a un atacante remoto ejecutar c\u00f3digo PHP de su elecci\u00f3n a trav\u00e9s del par\u00e1metro path_pre en (1) cm_lib.inc.php, (2) doc/br.edithelp.php, (3) doc/de.edithelp.php, (4) doc/ct.edithelp.php, (5) userrating.php, y (6) listing.php, un grupo diferente de vectores que CVE-2006-4204. NOTA: un tercer investigador ha discutido sobre el impacto del vector de cm_lib.inc.php, indicando que est\u00e1 limitado a la inclusi\u00f3n local del archivo. El an\u00e1lisis de CVE en fecha 05/09/2006 concurre que: aunque el uso de ftp URLs es tambi\u00e9n posible. Los cinco vectores restantes tambi\u00e9n han sido discutidos por terceros, indicando que la variable del path_pre est\u00e1 inicializada antes de que se utilice."}], "lastModified": "2024-11-21T00:16:22.017", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:phpprojekt:phpprojekt:0.6.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "30064CE0-50EA-4881-B34F-FA6774102096"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org", "evaluatorSolution": "Successful exploitation requires that \"register_globals\" is enabled."}