Lumension® Endpoint Intelligence Center

Intelligence Center » Browse All Vulnerabilities » CVE-2006-2002

Overview

Vulnerability Score 5.0 5.0
CVE Id CVE-2006-2002
Last Modified 07 Mar 2011 09:34:46
Published 25 Apr 2006 08:50:00
Confidentiality Impact NONE NONE
Integrity Impact PARTIAL PARTIAL
Availability Impact NONE NONE
Access Vector NETWORK
Access Complexity LOW
Authentication NONE

CVE-2006-2002

Summary

PHP remote file inclusion vulnerability in stats.php in MyGamingLadder 7.0 allows remote attackers to execute arbitrary PHP code via a URL in the dir[base] parameter.

Vulnerable Systems

Application

  • Mygamingladder 7.0


References

VUPEN - ADV-2006-1483

BID - 17657

BUGTRAQ - 20060422 Advisory: My Gaming Ladder Combo System <= 7.0 Remote File Inclusion Vulnerability.

MISC - http://www.nukedx.com/?viewdoc=28

SECUNIA - 19773

XF - mygamingladder-stats-file-inclusion(25992)

OSVDB - 24892


Last Updated: 27 May 2016 10:42:18