Vulnerability Details : CVE-2006-0824
Multiple unspecified vulnerabilities in lib-common.php in Geeklog 1.4.0 before 1.4.0sr1 and 1.3.11 before 1.3.11sr4 allow remote attackers to include arbitrary local files and execute arbitrary code via (1) absolute paths in unspecified parameters and (2) the language cookie, as demonstrated for code execution using error.log.
Vulnerability category: Execute code
Products affected by CVE-2006-0824
- cpe:2.3:a:geeklog:geeklog:1.3.11:*:*:*:*:*:*:*
- cpe:2.3:a:geeklog:geeklog:1.3.11_sr1:*:*:*:*:*:*:*
- cpe:2.3:a:geeklog:geeklog:1.3.11_sr2:*:*:*:*:*:*:*
- cpe:2.3:a:geeklog:geeklog:1.3.11_sr3:*:*:*:*:*:*:*
- cpe:2.3:a:geeklog:geeklog:1.4.0:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2006-0824
3.29%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 86 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2006-0824
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
7.5
|
HIGH | AV:N/AC:L/Au:N/C:P/I:P/A:P |
10.0
|
6.4
|
NIST |
References for CVE-2006-0824
-
http://www.osvdb.org/23349
-
http://www.gulftech.org/?node=research&article_id=00102-02192006
-
http://secunia.com/advisories/18920
Patch;Vendor Advisory
-
http://www.securityfocus.com/archive/1/425506/100/0/threaded
-
http://www.vupen.com/english/advisories/2006/0661
-
http://www.geeklog.net/article.php/geeklog-1.4.0sr1
Patch
-
http://www.securityfocus.com/bid/16755
Jump to