CVE-2006-2686

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://secunia.com/advisories/20299", "name": "20299", "tags": ["Exploit", "Vendor Advisory"], "refsource": "SECUNIA"}, {"url": "http://www.osvdb.org/27256", "name": "27256", "tags": [], "refsource": "OSVDB"}, {"url": "http://www.osvdb.org/27257", "name": "27257", "tags": [], "refsource": "OSVDB"}, {"url": "http://www.osvdb.org/27260", "name": "27260", "tags": [], "refsource": "OSVDB"}, {"url": "http://www.osvdb.org/27261", "name": "27261", "tags": [], "refsource": "OSVDB"}, {"url": "http://www.osvdb.org/27262", "name": "27262", "tags": [], "refsource": "OSVDB"}, {"url": "http://www.osvdb.org/27263", "name": "27263", "tags": [], "refsource": "OSVDB"}, {"url": "http://www.osvdb.org/27275", "name": "27275", "tags": [], "refsource": "OSVDB"}, {"url": "http://www.osvdb.org/27282", "name": "27282", "tags": [], "refsource": "OSVDB"}, {"url": "http://www.osvdb.org/27285", "name": "27285", "tags": [], "refsource": "OSVDB"}, {"url": "http://www.osvdb.org/27297", "name": "27297", "tags": [], "refsource": "OSVDB"}, {"url": "http://www.osvdb.org/27298", "name": "27298", "tags": [], "refsource": "OSVDB"}, {"url": "http://www.osvdb.org/27300", "name": "27300", "tags": [], "refsource": "OSVDB"}, {"url": "http://www.osvdb.org/27301", "name": "27301", "tags": [], "refsource": "OSVDB"}, {"url": "http://www.osvdb.org/27302", "name": "27302", "tags": [], "refsource": "OSVDB"}, {"url": "http://www.osvdb.org/27303", "name": "27303", "tags": [], "refsource": "OSVDB"}, {"url": "http://www.osvdb.org/27305", "name": "27305", "tags": [], "refsource": "OSVDB"}, {"url": "http://www.osvdb.org/27310", "name": "27310", "tags": [], "refsource": "OSVDB"}, {"url": "http://www.osvdb.org/27253", "name": "27253", "tags": [], "refsource": "OSVDB"}, {"url": "http://www.osvdb.org/27254", "name": "27254", "tags": [], "refsource": "OSVDB"}, {"url": "http://www.osvdb.org/27258", "name": "27258", "tags": [], "refsource": "OSVDB"}, {"url": "http://www.osvdb.org/27259", "name": "27259", "tags": [], "refsource": "OSVDB"}, {"url": "http://www.osvdb.org/27266", "name": "27266", "tags": [], "refsource": "OSVDB"}, {"url": "http://www.osvdb.org/27267", "name": "27267", "tags": [], "refsource": "OSVDB"}, {"url": "http://www.osvdb.org/27268", "name": "27268", "tags": [], "refsource": "OSVDB"}, {"url": "http://www.osvdb.org/27269", "name": "27269", "tags": [], "refsource": "OSVDB"}, {"url": "http://www.osvdb.org/27272", "name": "27272", "tags": [], "refsource": "OSVDB"}, {"url": "http://www.osvdb.org/27273", "name": "27273", "tags": [], "refsource": "OSVDB"}, {"url": "http://www.osvdb.org/27274", "name": "27274", "tags": [], "refsource": "OSVDB"}, {"url": "http://www.osvdb.org/27276", "name": "27276", "tags": [], "refsource": "OSVDB"}, {"url": "http://www.osvdb.org/27277", "name": "27277", "tags": [], "refsource": "OSVDB"}, {"url": "http://www.osvdb.org/27278", "name": "27278", "tags": [], "refsource": "OSVDB"}, {"url": "http://www.osvdb.org/27279", "name": "27279", "tags": [], "refsource": "OSVDB"}, {"url": "http://www.osvdb.org/27280", "name": "27280", "tags": [], "refsource": "OSVDB"}, {"url": "http://www.osvdb.org/27281", "name": "27281", "tags": [], "refsource": "OSVDB"}, {"url": "http://www.osvdb.org/27283", "name": "27283", "tags": [], "refsource": "OSVDB"}, {"url": "http://www.osvdb.org/27284", "name": "27284", "tags": [], "refsource": "OSVDB"}, {"url": "http://www.osvdb.org/27286", "name": "27286", "tags": [], "refsource": "OSVDB"}, {"url": "http://www.osvdb.org/27287", "name": "27287", "tags": [], "refsource": "OSVDB"}, {"url": "http://www.osvdb.org/27288", "name": "27288", "tags": [], "refsource": "OSVDB"}, {"url": "http://www.osvdb.org/27292", "name": "27292", "tags": [], "refsource": "OSVDB"}, {"url": "http://www.osvdb.org/27293", "name": "27293", "tags": [], "refsource": "OSVDB"}, {"url": "http://www.osvdb.org/27294", "name": "27294", "tags": [], "refsource": "OSVDB"}, {"url": "http://www.osvdb.org/27295", "name": "27295", "tags": [], "refsource": "OSVDB"}, {"url": "http://www.osvdb.org/27296", "name": "27296", "tags": [], "refsource": "OSVDB"}, {"url": "http://www.osvdb.org/27304", "name": "27304", "tags": [], "refsource": "OSVDB"}, {"url": "http://www.osvdb.org/27264", "name": "27264", "tags": [], "refsource": "OSVDB"}, {"url": "http://www.osvdb.org/27265", "name": "27265", "tags": [], "refsource": "OSVDB"}, {"url": "http://www.osvdb.org/27270", "name": "27270", "tags": [], "refsource": "OSVDB"}, {"url": "http://www.osvdb.org/27271", "name": "27271", "tags": [], "refsource": "OSVDB"}, {"url": "http://www.osvdb.org/27289", "name": "27289", "tags": [], "refsource": "OSVDB"}, {"url": "http://www.osvdb.org/27290", "name": "27290", "tags": [], "refsource": "OSVDB"}, {"url": "http://www.osvdb.org/27291", "name": "27291", "tags": [], "refsource": "OSVDB"}, {"url": "http://www.osvdb.org/27299", "name": "27299", "tags": [], "refsource": "OSVDB"}, {"url": "http://www.osvdb.org/27306", "name": "27306", "tags": [], "refsource": "OSVDB"}, {"url": "http://www.osvdb.org/27308", "name": "27308", "tags": [], "refsource": "OSVDB"}, {"url": "http://www.osvdb.org/27309", "name": "27309", "tags": [], "refsource": "OSVDB"}, {"url": "http://www.securityfocus.com/bid/19133", "name": "19133", "tags": [], "refsource": "BID"}, {"url": "http://www.vupen.com/english/advisories/2006/1997", "name": "ADV-2006-1997", "tags": [], "refsource": "VUPEN"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/26776", "name": "actionapps-globals-file-include(26776)", "tags": [], "refsource": "XF"}, {"url": "https://www.exploit-db.com/exploits/1829", "name": "1829", "tags": [], "refsource": "EXPLOIT-DB"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "PHP remote file inclusion vulnerabilities in ActionApps 2.8.1 allow remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[AA_INC_PATH] parameter in (1) cached.php3, (2) cron.php3, (3) discussion.php3, (4) filldisc.php3, (5) filler.php3, (6) fillform.php3, (7) go.php3, (8) hiercons.php3, (9) jsview.php3, (10) live_checkbox.php3, (11) offline.php3, (12) post2shtml.php3, (13) search.php3, (14) slice.php3, (15) sql_update.php3, (16) view.php3, (17) multiple files in the (18) admin/ folder, (19) includes folder, and (20) modules/ folder."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "CWE-94"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2006-2686", "ASSIGNER": "cve@mitre.org"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 6.4, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "severity": "MEDIUM", "impactScore": 4.9, "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}}, "publishedDate": "2006-05-31T10:06Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:actionapps:actionapps:2.8.1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2017-10-19T01:29Z"}