FKIE_CVE-2006-3340

Vulnerability from fkie_nvd - Published: 2006-07-03 18:05 - Updated: 2026-06-16 22:26
Severity
Summary
Multiple PHP remote file inclusion vulnerabilities in Pearl For Mambo module 1.6 for Mambo, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via the (1) phpbb_root_path parameter in (a) includes/functions_cms.php and the (2) GlobalSettings[templatesDirectory] parameter in multiple files in the "includes" directory including (b) adminSensored.php, (c) adminBoards.php, (d) adminAttachments.php, (e) adminAvatars.php, (f) adminBackupdatabase.php, (g) adminBanned.php, (h) adminForums.php, (i) adminPolls.php, (j) adminSmileys.php, (k) poll.php, and (l) move.php.
References
cve@mitre.orghttp://secunia.com/advisories/20819Vendor Advisory
cve@mitre.orghttp://www.osvdb.org/27168
cve@mitre.orghttp://www.osvdb.org/27169
cve@mitre.orghttp://www.osvdb.org/27170
cve@mitre.orghttp://www.osvdb.org/27171
cve@mitre.orghttp://www.osvdb.org/27172
cve@mitre.orghttp://www.osvdb.org/27173
cve@mitre.orghttp://www.osvdb.org/27174
cve@mitre.orghttp://www.osvdb.org/27175
cve@mitre.orghttp://www.osvdb.org/27176
cve@mitre.orghttp://www.osvdb.org/27177
cve@mitre.orghttp://www.osvdb.org/27178
cve@mitre.orghttp://www.securityfocus.com/bid/18690Exploit
cve@mitre.orghttp://www.vupen.com/english/advisories/2006/2561
cve@mitre.orghttps://www.exploit-db.com/exploits/1956
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/20819Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://www.osvdb.org/27168
af854a3a-2127-422b-91ae-364da2661108http://www.osvdb.org/27169
af854a3a-2127-422b-91ae-364da2661108http://www.osvdb.org/27170
af854a3a-2127-422b-91ae-364da2661108http://www.osvdb.org/27171
af854a3a-2127-422b-91ae-364da2661108http://www.osvdb.org/27172
af854a3a-2127-422b-91ae-364da2661108http://www.osvdb.org/27173
af854a3a-2127-422b-91ae-364da2661108http://www.osvdb.org/27174
af854a3a-2127-422b-91ae-364da2661108http://www.osvdb.org/27175
af854a3a-2127-422b-91ae-364da2661108http://www.osvdb.org/27176
af854a3a-2127-422b-91ae-364da2661108http://www.osvdb.org/27177
af854a3a-2127-422b-91ae-364da2661108http://www.osvdb.org/27178
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/18690Exploit
af854a3a-2127-422b-91ae-364da2661108http://www.vupen.com/english/advisories/2006/2561
af854a3a-2127-422b-91ae-364da2661108https://www.exploit-db.com/exploits/1956
Impacted products
Vendor Product Version
pearlinger pearl_for_mambo 1.5
pearlinger pearl_for_mambo 1.6
To clipboard 

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "source": "cve@mitre.org"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:pearlinger:pearl_for_mambo:1.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "E6C74BCF-75AF-40D4-8171-3FDA726CF34A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pearlinger:pearl_for_mambo:1.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "90A00BA2-FE5A-486F-9845-F2DA15CBA5AE",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Multiple PHP remote file inclusion vulnerabilities in Pearl For Mambo module 1.6 for Mambo, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via the (1) phpbb_root_path parameter in (a) includes/functions_cms.php and the (2) GlobalSettings[templatesDirectory] parameter in multiple files in the \"includes\" directory including (b) adminSensored.php, (c) adminBoards.php, (d) adminAttachments.php, (e) adminAvatars.php, (f) adminBackupdatabase.php, (g) adminBanned.php, (h) adminForums.php, (i) adminPolls.php, (j) adminSmileys.php, (k) poll.php, and (l) move.php."
    },
    {
      "lang": "es",
      "value": "M\u00faltiples vulnerabilidades de inclusi\u00f3n remotos de ficheros PHP en Pearl para el modulo Mambo v1.6 para Mambo, cuando register_globals esta activado, permite a atacantes remotos ejecutar c\u00f3digo PHP de modo arbitrario a trav\u00e9s de (1) el par\u00e1metro \"phpbb_root_path\" en (a) includes/functions_cms.php y (2) el par\u00e1metro \"GlobalSettings[templatesDirectory]\" en m\u00faltiples ficheros en el directorio \"includes\" incluyendo (b)  adminSensored.php, (c) adminBoards.php, (d) adminAttachments.php, (e) adminAvatars.php, (f) adminBackupdatabase.php, (g) adminBanned.php, (h) adminForums.php, (i) adminPolls.php, (j) adminSmileys.php, (k) poll.php, y (l) move.php."
    }
  ],
  "id": "CVE-2006-3340",
  "lastModified": "2026-06-16T22:26:52.570",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "HIGH",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 5.1,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 4.9,
        "impactScore": 6.4,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": true,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2006-07-03T18:05:00.000",
  "references": [
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/20819"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.osvdb.org/27168"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.osvdb.org/27169"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.osvdb.org/27170"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.osvdb.org/27171"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.osvdb.org/27172"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.osvdb.org/27173"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.osvdb.org/27174"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.osvdb.org/27175"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.osvdb.org/27176"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.osvdb.org/27177"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.osvdb.org/27178"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Exploit"
      ],
      "url": "http://www.securityfocus.com/bid/18690"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.vupen.com/english/advisories/2006/2561"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://www.exploit-db.com/exploits/1956"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/20819"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.osvdb.org/27168"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.osvdb.org/27169"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.osvdb.org/27170"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.osvdb.org/27171"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.osvdb.org/27172"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.osvdb.org/27173"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.osvdb.org/27174"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.osvdb.org/27175"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.osvdb.org/27176"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.osvdb.org/27177"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.osvdb.org/27178"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit"
      ],
      "url": "http://www.securityfocus.com/bid/18690"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.vupen.com/english/advisories/2006/2561"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://www.exploit-db.com/exploits/1956"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

JSON

Loading timeline…




    Related by attack behaviour

    Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.