CVE-2006-6511

{"id": "CVE-2006-6511", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": true, "userInteractionRequired": false}]}, "published": "2006-12-14T00:28:00.000", "references": [{"url": "http://bugs.dadaimc.org/view.php?id=191", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/23305", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2006/4977", "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/30862", "source": "cve@mitre.org"}, {"url": "http://bugs.dadaimc.org/view.php?id=191", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://secunia.com/advisories/23305", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.vupen.com/english/advisories/2006/4977", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/30862", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "dadaIMC .99.3 uses an insufficiently restrictive FilesMatch directive in the installed .htaccess file, which allows remote attackers to execute arbitrary PHP code by uploading files whose names contain (1) feature, (2) editor, (3) newswire, (4) otherpress, (5) admin, (6) pbook, (7) media, or (8) mod, which are processed as PHP file types (application/x-httpd-php)."}, {"lang": "es", "value": "dadaIMC .99.3 utiliza directivas FilesMatch insuficientemente restrictivas en el fichero .htaccess instalado, lo cual permite a atacantes remotos ejecutar c\u00f3digo PHP de su elecci\u00f3n promocionando ficheros cuyos nombres contienen (1) feature, (2) editor, (3) newswire, (4) otherpress, (5) admin, (6) pbook, (7) media, \u00f3 (8) mod, que son procesados como tipos de ficheros PHP (application/x-httpd-php)."}], "lastModified": "2024-11-21T00:22:51.717", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:dadaimc:dadaimc:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "937C286F-1D59-44C9-95E1-B92A219036F1", "versionEndIncluding": "0.99.3"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org", "evaluatorSolution": "Successful exploitation requires that dadaIMC is installed into a shared environment."}