National Cyber Awareness System

Vulnerability Summary for CVE-2006-2686

Overview

PHP remote file inclusion vulnerabilities in ActionApps 2.8.1 allow remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[AA_INC_PATH] parameter in (1) cached.php3, (2) cron.php3, (3) discussion.php3, (4) filldisc.php3, (5) filler.php3, (6) fillform.php3, (7) go.php3, (8) hiercons.php3, (9) jsview.php3, (10) live_checkbox.php3, (11) offline.php3, (12) post2shtml.php3, (13) search.php3, (14) slice.php3, (15) sql_update.php3, (16) view.php3, (17) multiple files in the (18) admin/ folder, (19) includes folder, and (20) modules/ folder.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: VUPEN

Name: ADV-2006-1997

Hyperlink:http://www.vupen.com/english/advisories/2006/1997

External Source: OSVDB

Name: 27310

Hyperlink:http://www.osvdb.org/27310

External Source: OSVDB

Name: 27305

Hyperlink:http://www.osvdb.org/27305

External Source: OSVDB

Name: 27304

Hyperlink:http://www.osvdb.org/27304

External Source: OSVDB

Name: 27303

Hyperlink:http://www.osvdb.org/27303

External Source: OSVDB

Name: 27302

Hyperlink:http://www.osvdb.org/27302

External Source: OSVDB

Name: 27301

Hyperlink:http://www.osvdb.org/27301

External Source: OSVDB

Name: 27300

Hyperlink:http://www.osvdb.org/27300

External Source: OSVDB

Name: 27298

Hyperlink:http://www.osvdb.org/27298

External Source: OSVDB

Name: 27297

Hyperlink:http://www.osvdb.org/27297

External Source: OSVDB

Name: 27296

Hyperlink:http://www.osvdb.org/27296

External Source: OSVDB

Name: 27295

Hyperlink:http://www.osvdb.org/27295

External Source: OSVDB

Name: 27294

Hyperlink:http://www.osvdb.org/27294

External Source: OSVDB

Name: 27293

Hyperlink:http://www.osvdb.org/27293

External Source: OSVDB

Name: 27292

Hyperlink:http://www.osvdb.org/27292

External Source: OSVDB

Name: 27288

Hyperlink:http://www.osvdb.org/27288

External Source: OSVDB

Name: 27287

Hyperlink:http://www.osvdb.org/27287

External Source: OSVDB

Name: 27286

Hyperlink:http://www.osvdb.org/27286

External Source: OSVDB

Name: 27285

Hyperlink:http://www.osvdb.org/27285

External Source: OSVDB

Name: 27284

Hyperlink:http://www.osvdb.org/27284

External Source: OSVDB

Name: 27283

Hyperlink:http://www.osvdb.org/27283

External Source: OSVDB

Name: 27282

Hyperlink:http://www.osvdb.org/27282

External Source: OSVDB

Name: 27281

Hyperlink:http://www.osvdb.org/27281

External Source: OSVDB

Name: 27280

Hyperlink:http://www.osvdb.org/27280

External Source: OSVDB

Name: 27279

Hyperlink:http://www.osvdb.org/27279

External Source: OSVDB

Name: 27278

Hyperlink:http://www.osvdb.org/27278

External Source: OSVDB

Name: 27277

Hyperlink:http://www.osvdb.org/27277

External Source: OSVDB

Name: 27276

Hyperlink:http://www.osvdb.org/27276

External Source: OSVDB

Name: 27275

Hyperlink:http://www.osvdb.org/27275

External Source: OSVDB

Name: 27274

Hyperlink:http://www.osvdb.org/27274

External Source: OSVDB

Name: 27273

Hyperlink:http://www.osvdb.org/27273

External Source: OSVDB

Name: 27272

Hyperlink:http://www.osvdb.org/27272

External Source: OSVDB

Name: 27270

Hyperlink:http://www.osvdb.org/27270

External Source: OSVDB

Name: 27269

Hyperlink:http://www.osvdb.org/27269

External Source: OSVDB

Name: 27268

Hyperlink:http://www.osvdb.org/27268

External Source: OSVDB

Name: 27267

Hyperlink:http://www.osvdb.org/27267

External Source: OSVDB

Name: 27266

Hyperlink:http://www.osvdb.org/27266

External Source: OSVDB

Name: 27265

Hyperlink:http://www.osvdb.org/27265

External Source: OSVDB

Name: 27264

Hyperlink:http://www.osvdb.org/27264

External Source: OSVDB

Name: 27263

Hyperlink:http://www.osvdb.org/27263

External Source: OSVDB

Name: 27262

Hyperlink:http://www.osvdb.org/27262

External Source: OSVDB

Name: 27261

Hyperlink:http://www.osvdb.org/27261

External Source: OSVDB

Name: 27260

Hyperlink:http://www.osvdb.org/27260

External Source: OSVDB

Name: 27259

Hyperlink:http://www.osvdb.org/27259

External Source: OSVDB

Name: 27258

Hyperlink:http://www.osvdb.org/27258

External Source: OSVDB

Name: 27257

Hyperlink:http://www.osvdb.org/27257

External Source: OSVDB

Name: 27256

Hyperlink:http://www.osvdb.org/27256

External Source: OSVDB

Name: 27254

Hyperlink:http://www.osvdb.org/27254

External Source: OSVDB

Name: 27253

Hyperlink:http://www.osvdb.org/27253

External Source: SECUNIA

Name: 20299

Type: Advisory; Exploit

Hyperlink:http://secunia.com/advisories/20299

External Source: MILW0RM

Name: 1829

Hyperlink:http://milw0rm.com/exploits/1829

External Source: XF

Name: actionapps-globals-file-include(26776)

Hyperlink:http://xforce.iss.net/xforce/xfdb/26776

External Source: BID

Name: 19133

Hyperlink:http://www.securityfocus.com/bid/19133

External Source: OSVDB

Name: 27309

Hyperlink:http://www.osvdb.org/27309

External Source: OSVDB

Name: 27308

Hyperlink:http://www.osvdb.org/27308

External Source: OSVDB

Name: 27306

Hyperlink:http://www.osvdb.org/27306

External Source: OSVDB

Name: 27299

Hyperlink:http://www.osvdb.org/27299

External Source: OSVDB

Name: 27291

Hyperlink:http://www.osvdb.org/27291

External Source: OSVDB

Name: 27290

Hyperlink:http://www.osvdb.org/27290

External Source: OSVDB

Name: 27289

Hyperlink:http://www.osvdb.org/27289

External Source: OSVDB

Name: 27271

Hyperlink:http://www.osvdb.org/27271