Vulnerability Description
PHP remote file inclusion vulnerability in Sonium Enterprise Adressbook 0.2 allows remote attackers to execute arbitrary PHP code via the folder parameter in multiple files in the plugins directory, as demonstrated by plugins/1_Adressbuch/delete.php.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Sonium | Enterprise Adressbook | 0.2 |
References
- http://secunia.com/advisories/21553Vendor Advisory
- http://www.bb-pcsecurity.de/Websecurity/342/org/Sonium_Enterprise_Adressbook_Ver
- http://www.securityfocus.com/archive/1/443701/100/0/threaded
- http://www.securityfocus.com/bid/19597
- http://www.vupen.com/english/advisories/2006/3334
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28464
- http://secunia.com/advisories/21553Vendor Advisory
- http://www.bb-pcsecurity.de/Websecurity/342/org/Sonium_Enterprise_Adressbook_Ver
- http://www.securityfocus.com/archive/1/443701/100/0/threaded
- http://www.securityfocus.com/bid/19597
- http://www.vupen.com/english/advisories/2006/3334
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28464
FAQ
What is CVE-2006-4311?
CVE-2006-4311 is a vulnerability with a CVSS score of 7.5 (HIGH). PHP remote file inclusion vulnerability in Sonium Enterprise Adressbook 0.2 allows remote attackers to execute arbitrary PHP code via the folder parameter in multiple files in the plugins directory, a...
How severe is CVE-2006-4311?
CVE-2006-4311 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2006-4311?
Check the references section above for vendor advisories and patch information. Affected products include: Sonium Enterprise Adressbook.