cvelist/2006/3xxx/CVE-2006-3193.json

182 lines
6.1 KiB
JSON
Raw Normal View History

2017-10-16 12:31:07 -04:00
{
2019-03-18 01:01:40 +00:00
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2006-3193",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
2017-10-16 12:31:07 -04:00
]
2019-03-18 01:01:40 +00:00
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Multiple PHP remote file inclusion vulnerabilities in Grayscale BandSite CMS 1.1.1, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the root_path parameter to (1) includes/content/contact_content.php; multiple files in adminpanel/includes/add_forms/ including (2) addbioform.php, (3) addfliersform.php, (4) addgenmerchform.php, (5) addinterviewsform.php, (6) addlinksform.php, (7) addlyricsform.php, (8) addmembioform.php, (9) addmerchform.php, (10) addmerchpicform.php, (11) addnewsform.php, (12) addphotosform.php, (13) addreleaseform.php, (14) addreleasepicform.php, (15) addrelmerchform.php, (16) addreviewsform.php, (17) addshowsform.php, (18) addwearmerchform.php; (19) adminpanel/includes/mailinglist/disphtmltbl.php, and (20) adminpanel/includes/mailinglist/dispxls.php."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "27251",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/27251"
},
{
"name": "27242",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/27242"
},
{
"name": "http://sourceforge.net/project/shownotes.php?release_id=428062",
"refsource": "CONFIRM",
"url": "http://sourceforge.net/project/shownotes.php?release_id=428062"
},
{
"name": "27245",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/27245"
},
{
"name": "27238",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/27238"
},
{
"name": "27250",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/27250"
},
{
"name": "27252",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/27252"
},
{
"name": "27240",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/27240"
},
{
"name": "27241",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/27241"
},
{
"name": "27244",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/27244"
},
{
"name": "27246",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/27246"
},
{
"name": "27235",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/27235"
},
{
"name": "18555",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/18555"
},
{
"name": "27233",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/27233"
},
{
"name": "27234",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/27234"
},
{
"name": "27236",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/27236"
},
{
"name": "1933",
"refsource": "EXPLOIT-DB",
"url": "https://www.exploit-db.com/exploits/1933"
},
{
"name": "27239",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/27239"
},
{
"name": "27248",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/27248"
},
{
"name": "27249",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/27249"
},
{
"name": "27237",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/27237"
},
{
"name": "20768",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/20768"
},
{
"name": "ADV-2006-2462",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2006/2462"
},
{
"name": "27247",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/27247"
},
{
"name": "27243",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/27243"
}
]
}
}