CVE-2006-4673
Published Sep 11, 2006
Last updated 7 years ago
Overview
- Description
- Global variable overwrite vulnerability in maincore.php in PHP-Fusion 6.01.4 and earlier uses the extract function on the superglobals, which allows remote attackers to conduct SQL injection attacks via the _SERVER[REMOTE_ADDR] parameter to news.php.
- Source
- cve@mitre.org
- NVD status
- Modified
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 2.6
- Impact score
- 2.9
- Exploitability score
- 4.9
- Vector string
- AV:N/AC:H/Au:N/C:N/I:P/A:N
Weaknesses
- nvd@nist.gov
- NVD-CWE-Other
Social media
- Hype score
- Not currently trending
Evaluator
- Comment
- -
- Impact
- -
- Solution
- -
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:php_fusion:php_fusion:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DDF0AE45-FE0B-44D8-8EC6-BDDFDFBAB7C2",
"versionEndIncluding": "6.01.4"
},
{
"criteria": "cpe:2.3:a:php_fusion:php_fusion:6.0.105:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C0F2384D-1E17-4DA8-A797-7E4729C2720F"
},
{
"criteria": "cpe:2.3:a:php_fusion:php_fusion:6.0.106:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C21F2030-F535-49A4-8E6E-FD1CBE689AFE"
},
{
"criteria": "cpe:2.3:a:php_fusion:php_fusion:6.0.107:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B06B0846-7C58-44D0-AAF9-E3CAA4050EBC"
},
{
"criteria": "cpe:2.3:a:php_fusion:php_fusion:6.0.109:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CE7A3A5D-3863-4035-9F70-7B07B5D5C2E2"
},
{
"criteria": "cpe:2.3:a:php_fusion:php_fusion:6.0.110:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E40D2A89-07E9-4773-99F1-CD73637D3568"
},
{
"criteria": "cpe:2.3:a:php_fusion:php_fusion:6.0.204:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0AA7C1CE-F03D-47BF-B896-514A868B6BD7"
},
{
"criteria": "cpe:2.3:a:php_fusion:php_fusion:6.0.206:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "00BDCC14-859F-4FE4-A357-E1661C0C19A9"
},
{
"criteria": "cpe:2.3:a:php_fusion:php_fusion:6.0.303:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "22116688-E0EA-4E14-8A31-F622B87C23F5"
},
{
"criteria": "cpe:2.3:a:php_fusion:php_fusion:6.0.304:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8E5008E9-570B-4CD4-915B-11C4AC5A07AE"
},
{
"criteria": "cpe:2.3:a:php_fusion:php_fusion:6.0.306:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "33A5EA0C-2668-4D53-A688-82E36CF7B220"
},
{
"criteria": "cpe:2.3:a:php_fusion:php_fusion:6.0.307:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8C553493-E8D3-4C43-83E7-2DE0A5A7465C"
}
],
"operator": "OR"
}
]
}
]