CVE-2006-4026 - Vulnerability Details - OpenCVE

PHP remote file inclusion vulnerability in SAPID CMS 123 rc3 allows remote attackers to execute arbitrary PHP code via a URL in the (1) root_path parameter in usr/extensions/get_infochannel.inc.php and the (2) GLOBALS["root_path"] parameter in usr/extensions/get_tree.inc.php.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Redgraphic	Sapid Cms

Configuration 1 [-]

cpe:2.3:a:redgraphic:sapid_cms:1.2.3:rc3:*:*:*:*:*:*

No data.

References

Link	Providers
http://secunia.com/advisories/21410
http://securityreason.com/securityalert/1346
http://securitytracker.com/id?1016650
http://www.securityfocus.com/archive/1/442425/100/0/threaded
http://www.securityfocus.com/bid/19383
http://www.vupen.com/english/advisories/2006/3191
https://exchange.xforce.ibmcloud.com/vulnerabilities/28250
https://www.exploit-db.com/exploits/2128

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2006-08-09T00:00:00

Updated: 2024-08-07T18:57:44.280Z

Reserved: 2006-08-08T00:00:00

Link: CVE-2006-4026

Vulnrichment

No data.

NVD

Status : Modified

Published: 2006-08-09T00:04:00.000

Modified: 2024-11-21T00:14:58.200

Link: CVE-2006-4026

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2006-08-07T00:00:00", "descriptions": [{"lang": "en", "value": "PHP remote file inclusion vulnerability in SAPID CMS 123 rc3 allows remote attackers to execute arbitrary PHP code via a URL in the (1) root_path parameter in usr/extensions/get_infochannel.inc.php and the (2) GLOBALS[\"root_path\"] parameter in usr/extensions/get_tree.inc.php."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-10-17T20:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "1016650", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://securitytracker.com/id?1016650"}, {"name": "21410", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/21410"}, {"name": "20060807 SAPID CMS remote File Inclusion vulnerabilities", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/442425/100/0/threaded"}, {"name": "sapidcms-infochannel-file-include(28250)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28250"}, {"name": "19383", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/19383"}, {"name": "1346", "tags": ["third-party-advisory", "x_refsource_SREASON"], "url": "http://securityreason.com/securityalert/1346"}, {"name": "ADV-2006-3191", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2006/3191"}, {"name": "2128", "tags": ["exploit", "x_refsource_EXPLOIT-DB"], "url": "https://www.exploit-db.com/exploits/2128"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2006-4026", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "PHP remote file inclusion vulnerability in SAPID CMS 123 rc3 allows remote attackers to execute arbitrary PHP code via a URL in the (1) root_path parameter in usr/extensions/get_infochannel.inc.php and the (2) GLOBALS[\"root_path\"] parameter in usr/extensions/get_tree.inc.php."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "1016650", "refsource": "SECTRACK", "url": "http://securitytracker.com/id?1016650"}, {"name": "21410", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/21410"}, {"name": "20060807 SAPID CMS remote File Inclusion vulnerabilities", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/442425/100/0/threaded"}, {"name": "sapidcms-infochannel-file-include(28250)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28250"}, {"name": "19383", "refsource": "BID", "url": "http://www.securityfocus.com/bid/19383"}, {"name": "1346", "refsource": "SREASON", "url": "http://securityreason.com/securityalert/1346"}, {"name": "ADV-2006-3191", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2006/3191"}, {"name": "2128", "refsource": "EXPLOIT-DB", "url": "https://www.exploit-db.com/exploits/2128"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T18:57:44.280Z"}, "title": "CVE Program Container", "references": [{"name": "1016650", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://securitytracker.com/id?1016650"}, {"name": "21410", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/21410"}, {"name": "20060807 SAPID CMS remote File Inclusion vulnerabilities", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://www.securityfocus.com/archive/1/442425/100/0/threaded"}, {"name": "sapidcms-infochannel-file-include(28250)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28250"}, {"name": "19383", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/19383"}, {"name": "1346", "tags": ["third-party-advisory", "x_refsource_SREASON", "x_transferred"], "url": "http://securityreason.com/securityalert/1346"}, {"name": "ADV-2006-3191", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2006/3191"}, {"name": "2128", "tags": ["exploit", "x_refsource_EXPLOIT-DB", "x_transferred"], "url": "https://www.exploit-db.com/exploits/2128"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2006-4026", "datePublished": "2006-08-09T00:00:00", "dateReserved": "2006-08-08T00:00:00", "dateUpdated": "2024-08-07T18:57:44.280Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:redgraphic:sapid_cms:1.2.3:rc3:*:*:*:*:*:*", "matchCriteriaId": "D77CFB60-2E9E-4644-9696-B412EA3CE9DF", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "PHP remote file inclusion vulnerability in SAPID CMS 123 rc3 allows remote attackers to execute arbitrary PHP code via a URL in the (1) root_path parameter in usr/extensions/get_infochannel.inc.php and the (2) GLOBALS[\"root_path\"] parameter in usr/extensions/get_tree.inc.php."}, {"lang": "es", "value": "Vulnerabilidad de inclusi\u00f3n remota de archivo en PHP en SAPID CMS 123 rc3 permite a atacantes remotos ejecutar c\u00f3digo PHP de su elecci\u00f3n mediante una URL en el par\u00e1metro (1) root_path en usr/extensions/get_infochannel.inc.php y el par\u00e1metro (2) GLOBALS[\"roog_path\"] en usr/extension/get_tree.inc.php."}], "id": "CVE-2006-4026", "lastModified": "2024-11-21T00:14:58.200", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": true, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2006-08-09T00:04:00.000", "references": [{"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/21410"}, {"source": "cve@mitre.org", "url": "http://securityreason.com/securityalert/1346"}, {"source": "cve@mitre.org", "url": "http://securitytracker.com/id?1016650"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/archive/1/442425/100/0/threaded"}, {"source": "cve@mitre.org", "tags": ["Exploit"], "url": "http://www.securityfocus.com/bid/19383"}, {"source": "cve@mitre.org", "url": "http://www.vupen.com/english/advisories/2006/3191"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28250"}, {"source": "cve@mitre.org", "url": "https://www.exploit-db.com/exploits/2128"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/21410"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://securityreason.com/securityalert/1346"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://securitytracker.com/id?1016650"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/archive/1/442425/100/0/threaded"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit"], "url": "http://www.securityfocus.com/bid/19383"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.vupen.com/english/advisories/2006/3191"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28250"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://www.exploit-db.com/exploits/2128"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-94"}], "source": "nvd@nist.gov", "type": "Primary"}]}