← Zuruck zu CVEs

CVE-2006-6511

N/A

Beschreibung

dadaIMC .99.3 uses an insufficiently restrictive FilesMatch directive in the installed .htaccess file, which allows remote attackers to execute arbitrary PHP code by uploading files whose names contain (1) feature, (2) editor, (3) newswire, (4) otherpress, (5) admin, (6) pbook, (7) media, or (8) mod, which are processed as PHP file types (application/x-httpd-php).

CVE Details

CVSS v3.1 BewertungN/A

Veroffentlicht12/14/2006

Zuletzt geandert4/9/2025

Quellenvd

Honeypot-Sichtungen0

Betroffene Produkte

dadaimc:dadaimc

Referenzen

http://bugs.dadaimc.org/view.php?id=191(cve@mitre.org)

http://secunia.com/advisories/23305(cve@mitre.org)

http://www.vupen.com/english/advisories/2006/4977(cve@mitre.org)

https://exchange.xforce.ibmcloud.com/vulnerabilities/30862(cve@mitre.org)

http://bugs.dadaimc.org/view.php?id=191(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/advisories/23305(af854a3a-2127-422b-91ae-364da2661108)

http://www.vupen.com/english/advisories/2006/4977(af854a3a-2127-422b-91ae-364da2661108)

https://exchange.xforce.ibmcloud.com/vulnerabilities/30862(af854a3a-2127-422b-91ae-364da2661108)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.