FKIE_CVE-2006-6740

Vulnerability from fkie_nvd - Published: 2006-12-26 23:28 - Updated: 2026-06-16 22:33
Severity
Summary
Multiple PHP remote file inclusion vulnerabilities in phpProfiles 3.1.2b and earlier allow remote attackers to execute arbitrary PHP code via a URL in the menu parameter to (1) include/body.inc.php or (2) include/body_admin.inc.php; or a URL in the incpath parameter to (3) index.inc.php, (4) account.inc.php, (5) admin_newcomm.inc.php, (6) header_admin.inc.php, (7) header.inc.php, (8) friends.inc.php, (9) menu_u.inc.php, (10) notify.inc.php, (11) body.inc.php, (12) body_admin.inc.php, (13) commrecc.inc.php, (14) do_reg.inc.php, (15) comm_post.inc.php, or (16) menu_v.inc.php in include/, different vectors than CVE-2006-5634. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.
References
cve@mitre.orghttp://linuxwebshop.com/forum/viewtopic.php?t=40URL Repurposed
cve@mitre.orghttp://secunia.com/advisories/23423Vendor Advisory
cve@mitre.orghttp://www.attrition.org/pipermail/vim/2007-March/001401.html
cve@mitre.orghttp://www.osvdb.org/32363
cve@mitre.orghttp://www.osvdb.org/32364
cve@mitre.orghttp://www.osvdb.org/32365
cve@mitre.orghttp://www.osvdb.org/32366
cve@mitre.orghttp://www.osvdb.org/32367
cve@mitre.orghttp://www.osvdb.org/32368
cve@mitre.orghttp://www.osvdb.org/32369
cve@mitre.orghttp://www.osvdb.org/32370
cve@mitre.orghttp://www.osvdb.org/32371
cve@mitre.orghttp://www.osvdb.org/32372
cve@mitre.orghttp://www.osvdb.org/32373
cve@mitre.orghttp://www.osvdb.org/32374
cve@mitre.orghttp://www.osvdb.org/32375
cve@mitre.orghttp://www.osvdb.org/32376
cve@mitre.orghttp://www.securityfocus.com/bid/21667Exploit
cve@mitre.orghttp://www.vupen.com/english/advisories/2006/5087
cve@mitre.orghttps://exchange.xforce.ibmcloud.com/vulnerabilities/30997
cve@mitre.orghttps://www.exploit-db.com/exploits/2956
af854a3a-2127-422b-91ae-364da2661108http://linuxwebshop.com/forum/viewtopic.php?t=40URL Repurposed
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/23423Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://www.attrition.org/pipermail/vim/2007-March/001401.html
af854a3a-2127-422b-91ae-364da2661108http://www.osvdb.org/32363
af854a3a-2127-422b-91ae-364da2661108http://www.osvdb.org/32364
af854a3a-2127-422b-91ae-364da2661108http://www.osvdb.org/32365
af854a3a-2127-422b-91ae-364da2661108http://www.osvdb.org/32366
af854a3a-2127-422b-91ae-364da2661108http://www.osvdb.org/32367
af854a3a-2127-422b-91ae-364da2661108http://www.osvdb.org/32368
af854a3a-2127-422b-91ae-364da2661108http://www.osvdb.org/32369
af854a3a-2127-422b-91ae-364da2661108http://www.osvdb.org/32370
af854a3a-2127-422b-91ae-364da2661108http://www.osvdb.org/32371
af854a3a-2127-422b-91ae-364da2661108http://www.osvdb.org/32372
af854a3a-2127-422b-91ae-364da2661108http://www.osvdb.org/32373
af854a3a-2127-422b-91ae-364da2661108http://www.osvdb.org/32374
af854a3a-2127-422b-91ae-364da2661108http://www.osvdb.org/32375
af854a3a-2127-422b-91ae-364da2661108http://www.osvdb.org/32376
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/21667Exploit
af854a3a-2127-422b-91ae-364da2661108http://www.vupen.com/english/advisories/2006/5087
af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/30997
af854a3a-2127-422b-91ae-364da2661108https://www.exploit-db.com/exploits/2956
Impacted products
Vendor Product Version
phpprofiles phpprofiles *
phpprofiles phpprofiles 2.1
To clipboard 

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "source": "cve@mitre.org"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:phpprofiles:phpprofiles:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "361656B4-F750-4795-A3B8-BA387373B3FD",
              "versionEndIncluding": "3.1.2b",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:phpprofiles:phpprofiles:2.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "E122EB40-E06D-4FAD-92E2-49A27D54BA64",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Multiple PHP remote file inclusion vulnerabilities in phpProfiles 3.1.2b and earlier allow remote attackers to execute arbitrary PHP code via a URL in the menu parameter to (1) include/body.inc.php or (2) include/body_admin.inc.php; or a URL in the incpath parameter to (3) index.inc.php, (4) account.inc.php, (5) admin_newcomm.inc.php, (6) header_admin.inc.php, (7) header.inc.php, (8) friends.inc.php, (9) menu_u.inc.php, (10) notify.inc.php, (11) body.inc.php, (12) body_admin.inc.php, (13) commrecc.inc.php, (14) do_reg.inc.php, (15) comm_post.inc.php, or (16) menu_v.inc.php in include/, different vectors than CVE-2006-5634.  NOTE: The provenance of this information is unknown; the details are obtained solely from third party information."
    },
    {
      "lang": "es",
      "value": "M\u00faltiples vulnerabilidades de inclusi\u00f3n remota de archivo en PHP en phpProfiles 3.1.2b y anteriores permiten a usuarios remotos autenticados ejecutar c\u00f3digo PHP de su elecci\u00f3n mediante una URL en el par\u00e1metro menu a (1) include/body.inc.php o (2) include/body_admin.inc.php; o una URL en el par\u00e1metro incpath a (3) index.inc.php, (4) account.inc.php, (5) admin_newcomm.inc.php, (6) header_admin.inc.php, (7) header.inc.php, (8) friends.inc.php, (9) menu_u.inc.php, (10) notify.inc.php, (11) body.inc.php, (12) body_admin.inc.php, (13) commrecc.inc.php, (14) do_reg.inc.php, (15) comm_post.inc.php, o (16) menu_v.inc.php in include/, vectores diferentes que CVE-2006-5634. NOTA: la procedencia de esta informaci\u00f3n es desconocida; los detalles se han obtenido solamente de informaci\u00f3n de terceros."
    }
  ],
  "evaluatorSolution": "Successful exploitation requires that \"register_globals\" is enabled.",
  "id": "CVE-2006-6740",
  "lastModified": "2026-06-16T22:33:42.230",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 7.5,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 6.4,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2006-12-26T23:28:00.000",
  "references": [
    {
      "source": "cve@mitre.org",
      "tags": [
        "URL Repurposed"
      ],
      "url": "http://linuxwebshop.com/forum/viewtopic.php?t=40"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/23423"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.attrition.org/pipermail/vim/2007-March/001401.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.osvdb.org/32363"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.osvdb.org/32364"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.osvdb.org/32365"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.osvdb.org/32366"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.osvdb.org/32367"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.osvdb.org/32368"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.osvdb.org/32369"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.osvdb.org/32370"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.osvdb.org/32371"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.osvdb.org/32372"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.osvdb.org/32373"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.osvdb.org/32374"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.osvdb.org/32375"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.osvdb.org/32376"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Exploit"
      ],
      "url": "http://www.securityfocus.com/bid/21667"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.vupen.com/english/advisories/2006/5087"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/30997"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://www.exploit-db.com/exploits/2956"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "URL Repurposed"
      ],
      "url": "http://linuxwebshop.com/forum/viewtopic.php?t=40"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/23423"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.attrition.org/pipermail/vim/2007-March/001401.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.osvdb.org/32363"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.osvdb.org/32364"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.osvdb.org/32365"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.osvdb.org/32366"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.osvdb.org/32367"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.osvdb.org/32368"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.osvdb.org/32369"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.osvdb.org/32370"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.osvdb.org/32371"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.osvdb.org/32372"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.osvdb.org/32373"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.osvdb.org/32374"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.osvdb.org/32375"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.osvdb.org/32376"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit"
      ],
      "url": "http://www.securityfocus.com/bid/21667"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.vupen.com/english/advisories/2006/5087"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/30997"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://www.exploit-db.com/exploits/2956"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-94"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.