Vulnerability Details : CVE-2006-0636
desktop.php in eyeOS 0.8.9 and earlier tests for the existence of the _SESSION variable before calling the session_start function, which allows remote attackers to execute arbitrary PHP code and possibly conduct other attacks by modifying critical assumed-immutable variables, as demonstrated using PHP code in the _SESSION[apps][eyeOptions.eyeapp][wrapup] variable.
Products affected by CVE-2006-0636
- cpe:2.3:o:eyeos_project:eyeos:0.8.4:*:*:*:*:*:*:*
- cpe:2.3:o:eyeos_project:eyeos:0.8.3:*:*:*:*:*:*:*
- cpe:2.3:o:eyeos_project:eyeos:0.8.3_r1:*:*:*:*:*:*:*
- cpe:2.3:o:eyeos_project:eyeos:0.8.7:*:*:*:*:*:*:*
- cpe:2.3:o:eyeos_project:eyeos:0.8.8:*:*:*:*:*:*:*
- cpe:2.3:o:eyeos_project:eyeos:0.8.2_r2:*:*:*:*:*:*:*
- cpe:2.3:o:eyeos_project:eyeos:0.8.2_r3:*:*:*:*:*:*:*
- cpe:2.3:o:eyeos_project:eyeos:0.8.5_r1:*:*:*:*:*:*:*
- cpe:2.3:o:eyeos_project:eyeos:0.8.6:*:*:*:*:*:*:*
- cpe:2.3:o:eyeos_project:eyeos:0.8:*:*:*:*:*:*:*
- cpe:2.3:o:eyeos_project:eyeos:0.8.1:*:*:*:*:*:*:*
- cpe:2.3:o:eyeos_project:eyeos:0.8.1_r1:*:*:*:*:*:*:*
- cpe:2.3:o:eyeos_project:eyeos:0.8.3_r2:*:*:*:*:*:*:*
- cpe:2.3:o:eyeos_project:eyeos:0.8.9:*:*:*:*:*:*:*
- cpe:2.3:o:eyeos_project:eyeos:0.8.2:*:*:*:*:*:*:*
- cpe:2.3:o:eyeos_project:eyeos:0.8.2_r1:*:*:*:*:*:*:*
- cpe:2.3:o:eyeos_project:eyeos:0.8.4_r1:*:*:*:*:*:*:*
- cpe:2.3:o:eyeos_project:eyeos:0.8.5:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2006-0636
1.27%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 78 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2006-0636
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
7.5
|
HIGH | AV:N/AC:L/Au:N/C:P/I:P/A:P |
10.0
|
6.4
|
NIST |
References for CVE-2006-0636
-
http://www.securityfocus.com/bid/16537
-
http://www.gulftech.org/?node=research&article_id=00096-02072006
Patch;Vendor Advisory
-
http://www.securityfocus.com/archive/1/424329/100/0/threaded
-
http://securityreason.com/securityalert/419
-
http://www.vupen.com/english/advisories/2006/0466
-
http://secunia.com/advisories/18757
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/24569
-
http://securitytracker.com/id?1015609
Jump to