CVE-2006-5621

PHP remote file inclusion vulnerability in end.php in ask_rave 0.9 PR, and other versions before 0.9b, allows remote attackers to execute arbitrary PHP code via a URL in the footfile parameter.

CVSS v2.0 7.5 HIGH

7.5^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 10.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://rave.jk-digital.com/blog/2006/12/08/ask_rave-09b-released/	Patch
http://www.securityfocus.com/bid/20758	Exploit
http://www.vupen.com/english/advisories/2006/4211	Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/29825
https://www.exploit-db.com/exploits/2654
http://rave.jk-digital.com/blog/2006/12/08/ask_rave-09b-released/	Patch
http://www.securityfocus.com/bid/20758	Exploit
http://www.vupen.com/english/advisories/2006/4211	Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/29825
https://www.exploit-db.com/exploits/2654

Configurations

Configuration 1 (hide)

cpe:2.3:a:ask_rave:ask_rave:*:*:*:*:*:*:*:*

History

21 Nov 2024, 00:19

Type	Values Removed	Values Added
References	~~() http://rave.jk-digital.com/blog/2006/12/08/ask_rave-09b-released/ - Patch~~	() http://rave.jk-digital.com/blog/2006/12/08/ask_rave-09b-released/ - Patch
References	~~() http://www.securityfocus.com/bid/20758 - Exploit~~	() http://www.securityfocus.com/bid/20758 - Exploit
References	~~() http://www.vupen.com/english/advisories/2006/4211 - Vendor Advisory~~	() http://www.vupen.com/english/advisories/2006/4211 - Vendor Advisory
References	~~() https://exchange.xforce.ibmcloud.com/vulnerabilities/29825 -~~	() https://exchange.xforce.ibmcloud.com/vulnerabilities/29825 -
References	~~() https://www.exploit-db.com/exploits/2654 -~~	() https://www.exploit-db.com/exploits/2654 -

Information

Published : 2006-10-31 20:07

Updated : 2024-11-21 00:19

NVD link : CVE-2006-5621

Mitre link : CVE-2006-5621

CVE.ORG link : CVE-2006-5621

JSON object : View

Products Affected

ask_rave

ask_rave

CWE

CWE-94

Improper Control of Generation of Code ('Code Injection')

{"id": "CVE-2006-5621", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": true, "userInteractionRequired": false}]}, "published": "2006-10-31T20:07:00.000", "references": [{"url": "http://rave.jk-digital.com/blog/2006/12/08/ask_rave-09b-released/", "tags": ["Patch"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/20758", "tags": ["Exploit"], "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2006/4211", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/29825", "source": "cve@mitre.org"}, {"url": "https://www.exploit-db.com/exploits/2654", "source": "cve@mitre.org"}, {"url": "http://rave.jk-digital.com/blog/2006/12/08/ask_rave-09b-released/", "tags": ["Patch"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/20758", "tags": ["Exploit"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.vupen.com/english/advisories/2006/4211", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/29825", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://www.exploit-db.com/exploits/2654", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-94"}]}], "descriptions": [{"lang": "en", "value": "PHP remote file inclusion vulnerability in end.php in ask_rave 0.9 PR, and other versions before 0.9b, allows remote attackers to execute arbitrary PHP code via a URL in the footfile parameter."}, {"lang": "es", "value": "Vulnerabilidad de inclusi\u00f3n remota de archivo en PHP en end.php de ask_rave 0.9 PR, y otras versiones anteriores a 0.9b, permite a atacantes remotos ejecutar c\u00f3digo PHP de su elecci\u00f3n mediante un URL en par\u00e1metro footfile."}], "lastModified": "2024-11-21T00:19:56.573", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ask_rave:ask_rave:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DB0B18D3-FC28-4349-AE50-F8C56B05F579", "versionEndIncluding": "0.9_pr"}], "operator": "OR"}]}], "vendorComments": [{"comment": "Ask_rave 0.9b has been released for immediate download and versions 0.9PR and below have been rendered obsolete. All users using versions 0.9PR and prior are recommended to upgrade their versions immediately. Users can use the following URI to download this new version: http://rave.jk-digital.com/site/scripts/ask.php", "lastModified": "2006-12-12T00:00:00", "organization": "Rave"}], "sourceIdentifier": "cve@mitre.org", "evaluatorSolution": "This vulnerability is addressed in the following product update:\r\nask_rave, ask_rave, 0.9b"}