Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 06/07/2006 Updated: 20/07/2017

CVSS v2 Base Score: 5.1 | Impact Score: 6.4 | Exploitability Score: 4.9

VMScore: 515

Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P

PHP remote file inclusion vulnerability in Stud.IP 1.3.0-2 and previous versions, when register_globals is enabled, allows remote malicious users to execute arbitrary PHP code via the (1) _PHPLIB[libdir] parameter in studip-phplib/oohforms.inc and (2) ABSOLUTE_PATH_STUDIP parameter in studip-htdocs/archiv_assi.php.

Vulnerable Product	Search on Vulmon	Subscribe to Product
stud.ip stud.ip

/*------------------------------------------------ IHS Public advisory -------------------------------------------------*/ StudIP Remote File Inclusion StudIP is a learning and an information management system for universities, educational facilities and enterprises wwwstudipde wwwdata-questde wwwsource ...

NVD-CWE-Other http://hamid.ir/security/studip.txt http://securitytracker.com/id?1016418 http://www.securityfocus.com/bid/18741 http://www.vupen.com/english/advisories/2006/2618 https://exchange.xforce.ibmcloud.com/vulnerabilities/27487 https://nvd.nist.gov https://www.exploit-db.com/exploits/1969/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2006-3361

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect