CVE-2006-4458
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2006-4458
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Directory traversal vulnerability in calendar/inc/class.holidaycalc.inc.php in phpGroupWare 0.9.16.010 and earlier allows remote attackers to include arbitrary local files via a .. (dot dot) sequence and trailing null (%00) byte in the GLOBALS[phpgw_info][user][preferences][common][country] parameter.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
PhpGroupWare日历模块'class.holidaycalc.inc.php'路径遍历漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
phpGroupWare是一个用PHP编写的多用户的网络组件，为开发其他程序提供了一个API。 phpGroupWare在处理用户请求时存在输入验证，远程攻击者可能利用此漏洞在服务器上以Web进程权限执行任意命令。 phpGroupWare的calendar/inc/class.holidaycalc.inc.php脚本没有正确验证全局phpgw_info[user][preferences][common][country]参数的输入，存在路径遍历漏洞。远程攻击者可以通过包含本地资源的任意文件导致执行任
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2006-4458
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2006-4458
请登录查看更多情报信息。
Same Patch Batch · n/a · 2006-08-31 · 55 CVEs total
| CVE-2006-4463 | Jetstat.com JS ASP Faq Manager 多个SQL注入漏洞 | |
| CVE-2006-4457 | phpECard 'index.php'include_path参数HP远程文件包含漏洞 | |
| CVE-2006-4473 | Joomla中com_content 不明填表寄信和邮件发送漏洞 | |
| CVE-2006-4476 | Joomla! 多个权限许可和访问控制漏洞 | |
| CVE-2006-4475 | Joomla! Admin Popups功能权限许可和访问控制漏洞 | |
| CVE-2006-4474 | Joomla! 多个跨站脚本攻击漏洞 | |
| CVE-2006-4456 | phpECard functions.php和index.php'远程文件包含漏洞 | |
| CVE-2006-4466 | Joomla! unset PHP指令bug 未明安全漏洞 | |
| CVE-2006-4465 | Microsoft终端服务器Explorer错误任意代码执行漏洞 | |
| CVE-2006-4464 | Nokia Browser 超大Unicode字符串拒绝服务攻击漏洞 | |
| CVE-2006-4467 | Simple Machines Forum unset PHP指令BUG 目录遍历漏洞 | |
| CVE-2006-4462 | Gonafish.com LinksCaffe 'admin1953.php' 安全权限获得漏洞 | |
| CVE-2006-4461 | Paessler IPCheck Server Monitor 探测器设置未明安全漏洞 | |
| CVE-2006-4460 | PHP iAddressBook未明跨站脚本攻击漏洞 | |
| CVE-2006-4486 | PHP 分配例程整型溢出漏洞 | |
| CVE-2006-4485 | PHP stripos函数未明攻击漏洞 | |
| CVE-2006-4484 | PHP 'gd_gif_in.c'LWZReadByte_函数缓冲区溢出漏洞 | |
| CVE-2006-4483 | PHP 'open_basedir或safe_mode'远程输入错误漏洞 | |
| CVE-2006-4482 | PHP 'string.c'多个堆缓冲区错误漏洞 | |
| CVE-2006-4481 | PHP 多个输入验证漏洞 |
Showing top 20 of 55 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2006-4458
No comments yet