CVE-2006-6549

PHP remote file inclusion vulnerability in upload.php in Rad Upload 3.02 allows remote attackers to execute arbitrary PHP code via a URL in the save_path parameter. NOTE: CVE disputes this vulnerability because save_path is originally defined as "" before use, and the nearby instructions say "SET THE SAVE PATH by editing the line below.

CVSS v2.0 7.5 HIGH

7.5^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 10.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://securityreason.com/securityalert/2034
http://www.securityfocus.com/archive/1/454175/100/0/threaded
https://exchange.xforce.ibmcloud.com/vulnerabilities/30864

Configurations

Configuration 1 (hide)

cpe:2.3:a:rad_inks:rad_upload:3.02:*:*:*:*:*:*:*

History

07 Nov 2023, 01:59

Type	Values Removed	Values Added
Summary	DISPUTED PHP remote file inclusion vulnerability in upload.php in Rad Upload 3.02 allows remote attackers to execute arbitrary PHP code via a URL in the save_path parameter. NOTE: CVE disputes this vulnerability because save_path is originally defined as "" before use, and the nearby instructions say "SET THE SAVE PATH by editing the line below."	PHP remote file inclusion vulnerability in upload.php in Rad Upload 3.02 allows remote attackers to execute arbitrary PHP code via a URL in the save_path parameter. NOTE: CVE disputes this vulnerability because save_path is originally defined as "" before use, and the nearby instructions say "SET THE SAVE PATH by editing the line below.

Information

Published : 2006-12-14 18:28

Updated : 2024-08-07 21:15

NVD link : CVE-2006-6549

Mitre link : CVE-2006-6549

CVE.ORG link : CVE-2006-6549

JSON object : View

Products Affected

rad_inks

rad_upload

CWE

NVD-CWE-Other

{"id": "CVE-2006-6549", "cveTags": [{"tags": ["disputed"], "sourceIdentifier": "cve@mitre.org"}], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": true, "userInteractionRequired": false}]}, "published": "2006-12-14T18:28:00.000", "references": [{"url": "http://securityreason.com/securityalert/2034", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/archive/1/454175/100/0/threaded", "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/30864", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "PHP remote file inclusion vulnerability in upload.php in Rad Upload 3.02 allows remote attackers to execute arbitrary PHP code via a URL in the save_path parameter. NOTE: CVE disputes this vulnerability because save_path is originally defined as \"\" before use, and the nearby instructions say \"SET THE SAVE PATH by editing the line below."}, {"lang": "es", "value": "** IMPUGNADO ** Vulnerabilidad de inclusi\u00f3n remota de archivo en PHP en upload.php de Rad Upload 3.02 permite a atacantes remotos ejecutar c\u00f3digo PHP de su elecci\u00f3n mediante una URL en el par\u00e1metro save_path.\r\nNOTA: CVE impugna esta vulnerabilidad porque save_path se define originalmente como \"\" antes de ser usado, y la instrucci\u00f3n dice \"Introduzca la ruta de guardado editando la l\u00ednea de abajo\". \r\n"}], "lastModified": "2024-08-07T21:15:33.717", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:rad_inks:rad_upload:3.02:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C75F6AD2-0B9B-49F7-A4F4-8ADBB74402E4"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}