Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
6.8
CVSSv2

CVE-2006-3995

Published: 05/08/2006 Updated: 19/10/2017
CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6
VMScore: 685
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Subscribe to User Home Pages

Vulnerability Summary

Multiple PHP remote file inclusion vulnerabilities in (1) uhp_config.php, and possibly (2) footer.php, (3) functions.php, (4) install.uhp.php, (5) toolbar.uhp.html.php, (6) uhp.class.php, and (7) uninstall.uhp.php, in the UHP (User Home Pages) 0.5 component (aka com_uhp) for Mambo or Joomla! allow remote malicious users to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.

Vulnerable Product Search on Vulmon Subscribe to Product

user home pages user home pages 0.5

Exploits

Exploit DB: Mambo Component User Home Pages 0.5 - Remote File Inclusion
>>> Kurdish Security >>> Freedom For Ocalan >>> Contact : ircgigachatnet #kurdhack & wwwPatrioticHackerscom >>> Rish : High >>> Class : Remote >>> Script : User Home Pges >>> Site : wwwravensportalcouk >>> Thanx : kurdishsniper,netqurd,flot,azad,darki,B3g0k,ju ...

References

CWE-94http://www.ravenswoodit.co.uk/index.php?option=com_docman&task=cat_view&gid=76&Itemid=13http://www.securityfocus.com/bid/19233http://www.osvdb.org/27651http://www.osvdb.org/27652http://secunia.com/advisories/21305http://www.osvdb.org/28111http://www.osvdb.org/28112http://www.osvdb.org/28113http://kurdishsecurity.blogspot.com/2006/07/kurdish-security-15-user-home-pges.htmlhttp://attrition.org/pipermail/vim/2007-March/001457.htmlhttp://attrition.org/pipermail/vim/2007-March/001458.htmlhttp://www.securityfocus.com/bid/23113http://www.vupen.com/english/advisories/2006/3056https://exchange.xforce.ibmcloud.com/vulnerabilities/33178https://exchange.xforce.ibmcloud.com/vulnerabilities/28080https://www.exploit-db.com/exploits/3553https://www.exploit-db.com/exploits/2089https://nvd.nist.govhttps://www.exploit-db.com/exploits/2089/
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2020-4463CVE-2024-3400deserializationCVE-2024-21788CVE-2023-42433CVE-2024-21841CVE-2024-22095local file inclusionmemory leak
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook