Beveiligingsadvies

CVE-2006-2516

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2006-05-22 22:00:00

Laatst bijgewerkt 2024-08-07 17:51:04

Toegewezen door mitre

CVSS-score geen score

Status PUBLISHED

Beschrijving

mainfile.php in XOOPS 2.0.13.2 and earlier, when register_globals is enabled, allows remote attackers to overwrite variables such as $xoopsOption['nocommon'] and conduct directory traversal attacks or include PHP files via (1) xoopsConfig[language] to misc.php or (2) xoopsConfig[theme_set] to index.php, as demonstrated by injecting PHP sequences into a log file.

← Alle CVE's bekijken Bekijk op cve.org ↗