Vulnerability Details CVE-2006-0171
PHP remote file include vulnerability in index.php in OrjinWeb E-commerce allows remote attackers to execute arbitrary code via a URL in the page parameter. NOTE: it is not clear, but OrjinWeb might be an application service, in which case it should not be included in CVE.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.057
EPSS Ranking 90.0%
CVSS Severity
CVSS v2 Score 7.5
References
- http://www.osvdb.org/22387
- http://www.securityfocus.com/archive/1/421312/100/0/threaded
- http://www.securityfocus.com/bid/16199
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24097
- http://www.osvdb.org/22387
- http://www.securityfocus.com/archive/1/421312/100/0/threaded
- http://www.securityfocus.com/bid/16199
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24097
Products affected by CVE-2006-0171
-
cpe:2.3:a:orjinweb:orjinweb_e-commerce:*