Vulnerability Name:

CVE-2006-2828 (CCN-27368)

Assigned:2006-05-30
Published:2006-05-30
Updated:2018-10-18
Summary:Global variable overwrite vulnerability in PHP-Nuke allows remote attackers to conduct remote PHP file inclusion attacks via a modified phpbb_root_path parameter to the admin scripts (1) index.php, (2) admin_ug_auth.php, (3) admin_board.php, (4) admin_disallow.php, (5) admin_forumauth.php, (6) admin_groups.php, (7) admin_ranks.php, (8) admin_styles.php, (9) admin_user_ban.php, (10) admin_words.php, (11) admin_avatar.php, (12) admin_db_utilities.php, (13) admin_forum_prune.php, (14) admin_forums.php, (15) admin_mass_email.php, (16) admin_smilies.php, (17) admin_ug_auth.php, and (18) admin_users.php, which overwrites $phpbb_root_path when the import_request_variables function is executed after $phpbb_root_path has been initialized to a static value.
CVSS v3 Severity:6.5 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): Low
Integrity (I): Low
Availibility (A): None
CVSS v2 Severity:6.4 Medium (CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Low
Authentication (Au): None
Impact Metrics:Confidentiality (C): Partial
Integrity (I): Partial
Availibility (A): None
6.4 Medium (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Low
Athentication (Au): None
Impact Metrics:Confidentiality (C): Partial
Integrity (I): Partial
Availibility (A): None
Vulnerability Type:CWE-Other
Vulnerability Consequences:Gain Access
References:Source: CCN
Type: BugTraq Mailing List, Tue May 30 2006 - 19:14:20 CDT
# MHG Security Team --- PHP NUKE All version Remote File Inc.

Source: CCN
Type: BugTraq Mailing List, Thu Jun 01 2006 - 10:14:37 CDT
Re: # MHG Security Team --- PHP NUKE All version Remote File Inc.

Source: CCN
Type: BugTraq Mailing List, Thu Jun 01 2006 - 19:49:48 CDT
Re: Re: # MHG Security Team --- PHP NUKE All version Remote File Inc.

Source: CCN
Type: BugTraq Mailing List, Fri Jun 02 2006 - 15:23:40 CDT
Re: Re: # MHG Security Team --- PHP NUKE All version Remote File Inc.

Source: MITRE
Type: CNA
CVE-2006-2828

Source: SREASON
Type: UNKNOWN
1040

Source: CCN
Type: OSVDB ID: 31776
PHP-Nuke mainfile.php phpbb_root_path Remote File Inclusion

Source: CCN
Type: PHP-Nuke Web site
PHP-Nuke

Source: BUGTRAQ
Type: UNKNOWN
20060531 # MHG Security Team --- PHP NUKE All version Remote File Inc.

Source: BUGTRAQ
Type: UNKNOWN
20060601 Re: # MHG Security Team --- PHP NUKE All version Remote File Inc.

Source: BUGTRAQ
Type: UNKNOWN
20060602 Re: Re: # MHG Security Team --- PHP NUKE All version Remote File Inc.

Source: CCN
Type: BID-18186
PHP-Nuke Multiple Remote File Include Vulnerabilities

Source: XF
Type: UNKNOWN
phpnuke-phpbbrootpath-fileInclude(27368)

Source: XF
Type: UNKNOWN
phpnuke-phpbbrootpath-fileInclude(27368)

Vulnerable Configuration:Configuration 1:
  • cpe:/a:php-nuke:ev:*:*:*:*:*:*:*:*

    • Configuration CCN 1:
  • cpe:/a:phpnuke:php-nuke:*:*:*:*:*:*:*:*

    • * Denotes that component is vulnerable
    BACK
    php-nuke ev *
    phpnuke php-nuke *