CVE-2006-0810

Unspecified vulnerability in config.php in Skate Board 0.9 allows remote authenticated administrators to execute arbitrary PHP code by causing certain variables in config.php to be modified, possibly due to XSS or direct static code injection.

Published Bycve@mitre.org

Published DateFeb 21, 2006, 02:02

Weakness Type (CWE):NVD-CWE-Other

CVSS Metrics

Base Score

3.5

Vector String

AV:N/AC:M/Au:S/C:N/I:P/A:N

Base Severity

Version

2.0

Attack Vector (AV)

Attack Complexity (AC)

Privileges Required (PR)

User Interaction (UI)

Scope (S)

Confidentiality (C)

NONE

Integrity (I)

PARTIAL

Availability (A)

NONE

References

http://evuln.com/vulns/84/summary.html
http://secunia.com/advisories/18978
http://securityreason.com/securityalert/540
http://www.osvdb.org/23304
http://www.securityfocus.com/archive/1/426658/30/0/threaded
http://www.securityfocus.com/bid/16936
https://exchange.xforce.ibmcloud.com/vulnerabilities/24780

Weakness Type (CWE):NVD-CWE-Other

CVSS Metrics

Base Score

3.5

Vector String

AV:N/AC:M/Au:S/C:N/I:P/A:N

Base Severity

Version

2.0

Attack Vector (AV)

Attack Complexity (AC)

Privileges Required (PR)

User Interaction (UI)

Scope (S)

Confidentiality (C)

NONE

Integrity (I)

PARTIAL

Availability (A)

NONE