CVE-2006-3608
Published Jul 18, 2006
Last updated 6 years ago
Overview
- Description
- The Gallery module in Simone Vellei Flatnuke 2.5.7 and earlier, when Gallery uploads are enabled, does not restrict the extensions of uploaded files that begin with a GIF header, which allows remote authenticated users to execute arbitrary PHP code via an uploaded .php file.
- Source
- cve@mitre.org
- NVD status
- Modified
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 4.6
- Impact score
- 6.4
- Exploitability score
- 3.9
- Vector string
- AV:N/AC:H/Au:S/C:P/I:P/A:P
Weaknesses
- nvd@nist.gov
- NVD-CWE-Other
Social media
- Hype score
- Not currently trending
Evaluator
- Comment
- -
- Impact
- -
- Solution
- -
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:flatnuke:flatnuke:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F23949E8-2FC2-429B-8F18-A71F8EE55BE9",
"versionEndIncluding": "2.5.7"
},
{
"criteria": "cpe:2.3:a:flatnuke:flatnuke:1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C37015F4-6F2C-4C29-93D3-AC3D718CCC0C"
},
{
"criteria": "cpe:2.3:a:flatnuke:flatnuke:1.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "54F525A5-D948-47F6-BADF-5D05DD35CF9B"
},
{
"criteria": "cpe:2.3:a:flatnuke:flatnuke:1.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4D472A2E-113F-41AA-969E-7ACB65381E77"
},
{
"criteria": "cpe:2.3:a:flatnuke:flatnuke:1.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D7A161EC-461C-4F4D-919A-81914A3F9097"
},
{
"criteria": "cpe:2.3:a:flatnuke:flatnuke:1.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F8E983BC-9611-40A7-A1B8-3F4A6F49877E"
},
{
"criteria": "cpe:2.3:a:flatnuke:flatnuke:2.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3B94F502-23E6-4624-AB60-F393AC4BDD8F"
},
{
"criteria": "cpe:2.3:a:flatnuke:flatnuke:2.5.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "263DBD5A-63AD-4568-B29A-AC9268D77067"
},
{
"criteria": "cpe:2.3:a:flatnuke:flatnuke:2.5.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E35353BC-BB2E-4702-BC8D-9809617199F9"
},
{
"criteria": "cpe:2.3:a:flatnuke:flatnuke:2.5.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "80720E0A-2E73-47B2-BA0E-4CFA177F5BFA"
},
{
"criteria": "cpe:2.3:a:flatnuke:flatnuke:2.5.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F59B925E-748F-4BC8-AF15-997CDAC9F9EE"
}
],
"operator": "OR"
}
]
}
]