Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
5.1
CVSSv2

CVE-2006-2745

Published: 01/06/2006 Updated: 18/10/2018
CVSS v2 Base Score: 5.1 | Impact Score: 6.4 | Exploitability Score: 4.9
VMScore: 515
Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Subscribe to Facile Interactive Web

Vulnerability Summary

Multiple PHP remote file inclusion vulnerabilities in F@cile Interactive Web 0.8.5 and previous versions, when register_globals is enabled, allow remote malicious users to execute arbitrary PHP code via a URL in the (1) pathfile parameter in (a) p-editpage.php and (b) p-editbox.php, and the (2) mytheme and (3) myskin parameters in multiple "p-themes" index.inc.php files including (c) lowgraphic, (d) classic, (e) puzzle, (f) simple, and (g) ciao.

Vulnerable Product Search on Vulmon Subscribe to Product

facile interactive web facile interactive web 0.8.41

facile interactive web facile interactive web

Exploits

Exploit DB: F@cile Interactive Web 0.8x - Remote File Inclusion / Cross-Site Scripting
F@cile Interactive Web <= 08x Multiple Remote Vulnerabilities Contacts > ICQ: 10072 MSN/Mail: nukedx@nukedxcom web: wwwnukedxcom This exploits works on F@cile Interactive Web <= 08x Original advisory can be found at: wwwnukedxcom/?viewdoc=35 File Inclusion Vulnerabilities [victim]/[FacilePath]/p-popupgalleryphp?l=ht ...

References

NVD-CWE-Otherhttp://www.nukedx.com/?getxpl=35http://www.nukedx.com/?viewdoc=35http://www.securityfocus.com/bid/18149http://secunia.com/advisories/20358http://www.osvdb.org/26101http://www.osvdb.org/26102http://www.osvdb.org/26103http://securityreason.com/securityalert/1010http://www.vupen.com/english/advisories/2006/2036https://exchange.xforce.ibmcloud.com/vulnerabilities/26854https://exchange.xforce.ibmcloud.com/vulnerabilities/26841http://www.securityfocus.com/archive/1/435283/100/0/threadedhttps://nvd.nist.govhttps://www.exploit-db.com/exploits/1841/
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
SSTICVE-2024-35863CVE-2024-35910man-in-the-middleCVE-2024-35912CVE-2024-25742LFICVE-2024-32002CVE-2024-22120
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook