CVE-2006-4113
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2006-4113
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
PHP remote file inclusion vulnerability in genpage-cgi.php in Brian Fraval hitweb 4.2 and possibly earlier versions allows remote attackers to execute arbitrary PHP code via the REP_INC parameter.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Hotmail CGI脚本跨站脚本执行漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Microsoft Hotmail是美国微软（Microsoft）公司的一套免费邮件系统。Microsoft Outlook（前称Hotmail）是美国微软（Microsoft）公司的一套免费邮件系统。 Hotmail的CGI脚本实现上存在跨站脚本执行漏洞，远程攻击者可能利用此漏洞非授权访问其他用户的邮箱。 由于没有正确过滤用户输入，导致newsletter.msn.com的insite.asp脚本中存在跨站脚本漏洞。攻击者可以利用这个脚本在已认证MSN用户浏览器的环境中执行任意代码，导致窃取基于cook
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2006-4113
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2006-4113
请登录查看更多情报信息。
Same Patch Batch · n/a · 2006-08-14 · 42 CVEs total
| CVE-2006-1168 | NCompress解压缓冲区溢出漏洞 | |
| CVE-2006-4139 | Sun Solaris Netstat和Ifconfig中本地拒绝服务漏洞 | |
| CVE-2006-4140 | IPCheck Server Monitor 畸形的".."(两点)序列目录遍历漏洞 | |
| CVE-2006-4141 | Virtual War (VWar) 'news.php'SQL注入漏洞 | |
| CVE-2006-4142 | Vwar 'Online.PHP' SQL注入漏洞 | |
| CVE-2006-4111 | Ruby on Rails路由上传文件HTTP GET请求拒绝服务漏洞 | |
| CVE-2006-4112 | Ruby on Rails路由 HTTP GET请求拒绝服务漏洞 | |
| CVE-2006-4114 | Nicolas Grandjean PHPMyRing 'view_com.php' SQL注入漏洞 | |
| CVE-2006-4115 | PgMarket 'Common.Inc.PHP'远程文件包含漏洞 | |
| CVE-2006-4116 | Lhaz 多个堆栈缓冲区溢出漏洞 | |
| CVE-2006-4117 | Sun Solaris squeue_drain函数服务攻击漏洞 | |
| CVE-2006-4138 | Microsoft Windows系统帮助文件中多个远程漏洞 | |
| CVE-2006-4102 | Falko Timme和Till Brehm SQLiteWebAdmin PHP远程文件包含漏洞 | |
| CVE-2006-4103 | Jason Alexander phNNTP 'article-raw.php'PHP远程文件包含漏洞 | |
| CVE-2006-4104 | mojoscripts.com mojoGallery 'admin.cgi' 跨站脚本攻击(XSS)漏洞 | |
| CVE-2006-4105 | Fill Threads Database 跨站脚本攻击(XSS)漏洞 | |
| CVE-2006-4106 | Blur6ex Title 跨站脚本攻击(XSS)漏洞 | |
| CVE-2006-4107 | Drupal Jobsearch模块SQL注入漏洞 | |
| CVE-2006-4108 | Drupal软件的Bibliography 未明SQL注入漏洞 | |
| CVE-2006-4109 | Drupal软件的Bibliography 'biblio.module'跨站脚本攻击(XSS)漏洞 |
Showing top 20 of 42 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2006-4113
No comments yet