VulnerabilityModified

CVE-2006-4189

MEDIUM 5.1EPSS 6.23%

Does this matter?

Lower severity and a low EPSS score (6.23%). Track it; it rarely justifies an emergency change on its own.

Description

Multiple PHP remote file inclusion vulnerabilities in Dolphin 5.1 allow remote attackers to execute arbitrary PHP code via a URL in the dir[inc] parameter in (1) index.php, (2) aemodule.php, (3) browse.php, (4) cc.php, (5) click.php, (6) faq.php, (7) gallery.php, (8) im.php, (9) inbox.php, (10) join_form.php, (11) logout.php, (12) messages_inbox.php, and many other scripts.

CVSS 2.0: 5.1 MEDIUMAV:N/AC:H/Au:N/C:P/I:P/A:P
EPSS: 6.23% probability · 93th percentile
CISA KEV: Not listed
Affected: boonex/dolphin
Source: cve@mitre.org

References

http://secunia.com/advisories/21535Vendor Advisory
http://securitytracker.com/id?1016692Exploit
http://www.osvdb.org/28473Exploit
http://www.osvdb.org/28474Exploit
http://www.osvdb.org/28478Exploit
http://www.osvdb.org/28479Exploit
http://www.osvdb.org/28485Exploit
http://www.osvdb.org/28492Exploit
http://www.osvdb.org/28493Exploit
http://www.osvdb.org/28496Exploit
http://www.osvdb.org/28498Exploit
http://www.osvdb.org/28499Exploit
http://www.osvdb.org/28500Exploit
http://www.osvdb.org/28501Exploit
http://www.osvdb.org/28502Exploit
http://www.osvdb.org/28503Exploit
http://www.osvdb.org/28504Exploit
http://www.osvdb.org/28505Exploit
http://www.osvdb.org/28506Exploit
http://www.osvdb.org/28507Exploit
http://www.osvdb.org/28508Exploit
http://www.osvdb.org/28509Exploit
http://www.osvdb.org/28510Exploit
http://www.osvdb.org/28511Exploit
http://www.osvdb.org/28512Exploit
http://www.osvdb.org/28513Exploit
http://www.osvdb.org/28514Exploit
http://www.osvdb.org/28515Exploit
http://www.osvdb.org/28516Exploit
http://www.osvdb.org/28517Exploit

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.