← Retour aux CVEs

CVE-2006-6511

N/A

Description

dadaIMC .99.3 uses an insufficiently restrictive FilesMatch directive in the installed .htaccess file, which allows remote attackers to execute arbitrary PHP code by uploading files whose names contain (1) feature, (2) editor, (3) newswire, (4) otherpress, (5) admin, (6) pbook, (7) media, or (8) mod, which are processed as PHP file types (application/x-httpd-php).

Details CVE

Score CVSS v3.1N/A

Publie12/14/2006

Derniere modification4/9/2025

Sourcenvd

Observations honeypot0

Produits affectes

dadaimc:dadaimc

References

http://bugs.dadaimc.org/view.php?id=191(cve@mitre.org)

http://secunia.com/advisories/23305(cve@mitre.org)

http://www.vupen.com/english/advisories/2006/4977(cve@mitre.org)

https://exchange.xforce.ibmcloud.com/vulnerabilities/30862(cve@mitre.org)

http://bugs.dadaimc.org/view.php?id=191(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/advisories/23305(af854a3a-2127-422b-91ae-364da2661108)

http://www.vupen.com/english/advisories/2006/4977(af854a3a-2127-422b-91ae-364da2661108)

https://exchange.xforce.ibmcloud.com/vulnerabilities/30862(af854a3a-2127-422b-91ae-364da2661108)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.