National Cyber-Alert System

Vulnerability Summary for CVE-2006-4189

Overview

Multiple PHP remote file inclusion vulnerabilities in Dolphin 5.1 allow remote attackers to execute arbitrary PHP code via a URL in the dir[inc] parameter in (1) index.php, (2) aemodule.php, (3) browse.php, (4) cc.php, (5) click.php, (6) faq.php, (7) gallery.php, (8) im.php, (9) inbox.php, (10) join_form.php, (11) logout.php, (12) messages_inbox.php, and many other scripts.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: XF

Name: dolphin-dirinc-file-include(28363)

Hyperlink:http://xforce.iss.net/xforce/xfdb/28363

External Source: OSVDB

Name: 28530

Hyperlink:http://www.osvdb.org/28530

External Source: OSVDB

Name: 28529

Hyperlink:http://www.osvdb.org/28529

External Source: OSVDB

Name: 28528

Hyperlink:http://www.osvdb.org/28528

External Source: OSVDB

Name: 28527

Hyperlink:http://www.osvdb.org/28527

External Source: OSVDB

Name: 28526

Hyperlink:http://www.osvdb.org/28526

External Source: OSVDB

Name: 28525

Hyperlink:http://www.osvdb.org/28525

External Source: OSVDB

Name: 28524

Hyperlink:http://www.osvdb.org/28524

External Source: OSVDB

Name: 28523

Hyperlink:http://www.osvdb.org/28523

External Source: OSVDB

Name: 28522

Hyperlink:http://www.osvdb.org/28522

External Source: OSVDB

Name: 28521

Hyperlink:http://www.osvdb.org/28521

External Source: OSVDB

Name: 28520

Hyperlink:http://www.osvdb.org/28520

External Source: OSVDB

Name: 28519

Hyperlink:http://www.osvdb.org/28519

External Source: OSVDB

Name: 28517

Hyperlink:http://www.osvdb.org/28517

External Source: OSVDB

Name: 28516

Hyperlink:http://www.osvdb.org/28516

External Source: OSVDB

Name: 28515

Hyperlink:http://www.osvdb.org/28515

External Source: OSVDB

Name: 28514

Hyperlink:http://www.osvdb.org/28514

External Source: OSVDB

Name: 28513

Hyperlink:http://www.osvdb.org/28513

External Source: OSVDB

Name: 28512

Hyperlink:http://www.osvdb.org/28512

External Source: OSVDB

Name: 28511

Hyperlink:http://www.osvdb.org/28511

External Source: OSVDB

Name: 28510

Hyperlink:http://www.osvdb.org/28510

External Source: OSVDB

Name: 28509

Hyperlink:http://www.osvdb.org/28509

External Source: OSVDB

Name: 28508

Hyperlink:http://www.osvdb.org/28508

External Source: OSVDB

Name: 28507

Hyperlink:http://www.osvdb.org/28507

External Source: OSVDB

Name: 28506

Hyperlink:http://www.osvdb.org/28506

External Source: OSVDB

Name: 28505

Hyperlink:http://www.osvdb.org/28505

External Source: OSVDB

Name: 28504

Hyperlink:http://www.osvdb.org/28504

External Source: OSVDB

Name: 28503

Hyperlink:http://www.osvdb.org/28503

External Source: OSVDB

Name: 28502

Hyperlink:http://www.osvdb.org/28502

External Source: OSVDB

Name: 28501

Hyperlink:http://www.osvdb.org/28501

External Source: OSVDB

Name: 28500

Hyperlink:http://www.osvdb.org/28500

External Source: OSVDB

Name: 28499

Hyperlink:http://www.osvdb.org/28499

External Source: OSVDB

Name: 28498

Hyperlink:http://www.osvdb.org/28498

External Source: OSVDB

Name: 28496

Hyperlink:http://www.osvdb.org/28496

External Source: OSVDB

Name: 28493

Hyperlink:http://www.osvdb.org/28493

External Source: OSVDB

Name: 28492

Hyperlink:http://www.osvdb.org/28492

External Source: OSVDB

Name: 28485

Hyperlink:http://www.osvdb.org/28485

External Source: OSVDB

Name: 28479

Hyperlink:http://www.osvdb.org/28479

External Source: OSVDB

Name: 28478

Hyperlink:http://www.osvdb.org/28478

External Source: OSVDB

Name: 28474

Hyperlink:http://www.osvdb.org/28474

External Source: OSVDB

Name: 28473

Hyperlink:http://www.osvdb.org/28473

External Source: VUPEN

Name: ADV-2006-3346

Type: Advisory

Hyperlink:http://www.frsirt.com/english/advisories/2006/3346

External Source: SECTRACK

Name: 1016692

Hyperlink:http://securitytracker.com/id?1016692

External Source: SECUNIA

Name: 21535

Type: Advisory

Hyperlink:http://secunia.com/advisories/21535

External Source: BID

Name: 21182

Hyperlink:http://www.securityfocus.com/bid/21182