Vulnerability Details CVE-2006-5816
Multiple PHP remote file inclusion vulnerabilities in Dmitry Sheiko Business Card Web Builder (BCWB) 2.5 allow remote attackers to execute arbitrary PHP code via a URL in the root_path_admin parameter to (1) /include/startup.inc.php, (2) dcontent/default.css.php, or (3) system/default.css.php, different vectors than CVE-2006-4946.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.008
EPSS Ranking 73.3%
CVSS Severity
CVSS v2 Score 7.5
References
- http://securityreason.com/securityalert/1836
- http://www.securityfocus.com/archive/1/450069/100/100/threaded
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29905
- http://securityreason.com/securityalert/1836
- http://www.securityfocus.com/archive/1/450069/100/100/threaded
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29905
Products affected by CVE-2006-5816
-
cpe:2.3:a:dmitry_sheiko:business_card_web_builder:2.5