cvelist/2006/3xxx/CVE-2006-3193.json

183 lines
5.5 KiB
JSON

{
"CVE_data_meta" : {
"ASSIGNER" : "cve@mitre.org",
"ID" : "CVE-2006-3193",
"STATE" : "PUBLIC"
},
"affects" : {
"vendor" : {
"vendor_data" : [
{
"product" : {
"product_data" : [
{
"product_name" : "n/a",
"version" : {
"version_data" : [
{
"version_value" : "n/a"
}
]
}
}
]
},
"vendor_name" : "n/a"
}
]
}
},
"data_format" : "MITRE",
"data_type" : "CVE",
"data_version" : "4.0",
"description" : {
"description_data" : [
{
"lang" : "eng",
"value" : "Multiple PHP remote file inclusion vulnerabilities in Grayscale BandSite CMS 1.1.1, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the root_path parameter to (1) includes/content/contact_content.php; multiple files in adminpanel/includes/add_forms/ including (2) addbioform.php, (3) addfliersform.php, (4) addgenmerchform.php, (5) addinterviewsform.php, (6) addlinksform.php, (7) addlyricsform.php, (8) addmembioform.php, (9) addmerchform.php, (10) addmerchpicform.php, (11) addnewsform.php, (12) addphotosform.php, (13) addreleaseform.php, (14) addreleasepicform.php, (15) addrelmerchform.php, (16) addreviewsform.php, (17) addshowsform.php, (18) addwearmerchform.php; (19) adminpanel/includes/mailinglist/disphtmltbl.php, and (20) adminpanel/includes/mailinglist/dispxls.php."
}
]
},
"problemtype" : {
"problemtype_data" : [
{
"description" : [
{
"lang" : "eng",
"value" : "n/a"
}
]
}
]
},
"references" : {
"reference_data" : [
{
"name" : "1933",
"refsource" : "EXPLOIT-DB",
"url" : "https://www.exploit-db.com/exploits/1933"
},
{
"name" : "http://sourceforge.net/project/shownotes.php?release_id=428062",
"refsource" : "CONFIRM",
"url" : "http://sourceforge.net/project/shownotes.php?release_id=428062"
},
{
"name" : "18555",
"refsource" : "BID",
"url" : "http://www.securityfocus.com/bid/18555"
},
{
"name" : "ADV-2006-2462",
"refsource" : "VUPEN",
"url" : "http://www.vupen.com/english/advisories/2006/2462"
},
{
"name" : "27240",
"refsource" : "OSVDB",
"url" : "http://www.osvdb.org/27240"
},
{
"name" : "27241",
"refsource" : "OSVDB",
"url" : "http://www.osvdb.org/27241"
},
{
"name" : "27242",
"refsource" : "OSVDB",
"url" : "http://www.osvdb.org/27242"
},
{
"name" : "27243",
"refsource" : "OSVDB",
"url" : "http://www.osvdb.org/27243"
},
{
"name" : "27244",
"refsource" : "OSVDB",
"url" : "http://www.osvdb.org/27244"
},
{
"name" : "27245",
"refsource" : "OSVDB",
"url" : "http://www.osvdb.org/27245"
},
{
"name" : "27247",
"refsource" : "OSVDB",
"url" : "http://www.osvdb.org/27247"
},
{
"name" : "27248",
"refsource" : "OSVDB",
"url" : "http://www.osvdb.org/27248"
},
{
"name" : "27249",
"refsource" : "OSVDB",
"url" : "http://www.osvdb.org/27249"
},
{
"name" : "27250",
"refsource" : "OSVDB",
"url" : "http://www.osvdb.org/27250"
},
{
"name" : "27251",
"refsource" : "OSVDB",
"url" : "http://www.osvdb.org/27251"
},
{
"name" : "27252",
"refsource" : "OSVDB",
"url" : "http://www.osvdb.org/27252"
},
{
"name" : "27233",
"refsource" : "OSVDB",
"url" : "http://www.osvdb.org/27233"
},
{
"name" : "27234",
"refsource" : "OSVDB",
"url" : "http://www.osvdb.org/27234"
},
{
"name" : "27235",
"refsource" : "OSVDB",
"url" : "http://www.osvdb.org/27235"
},
{
"name" : "27236",
"refsource" : "OSVDB",
"url" : "http://www.osvdb.org/27236"
},
{
"name" : "27237",
"refsource" : "OSVDB",
"url" : "http://www.osvdb.org/27237"
},
{
"name" : "27238",
"refsource" : "OSVDB",
"url" : "http://www.osvdb.org/27238"
},
{
"name" : "27239",
"refsource" : "OSVDB",
"url" : "http://www.osvdb.org/27239"
},
{
"name" : "27246",
"refsource" : "OSVDB",
"url" : "http://www.osvdb.org/27246"
},
{
"name" : "20768",
"refsource" : "SECUNIA",
"url" : "http://secunia.com/advisories/20768"
}
]
}
}