CVEvulnerability
CVE-2006-3193
5.1 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2006-06-23
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.1 MEDIUM — AV:N/AC:H/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-94
Description
Multiple PHP remote file inclusion vulnerabilities in Grayscale BandSite CMS 1.1.1, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the root_path parameter to (1) includes/content/contact_content.php; multiple files in adminpanel/includes/add_forms/ including (2) addbioform.php, (3) addfliersform.php, (4) addgenmerchform.php, (5) addinterviewsform.php, (6) addlinksform.php, (7) addlyricsform.php, (8) addmembioform.php, (9) addmerchform.php, (10) addmerchpicform.php, (11) addnewsform.php, (12) addphotosform.php, (13) addreleaseform.php, (14) addreleasepicform.php, (15) addrelmerchform.php, (16) addreviewsform.php, (17) addshowsform.php, (18) addwearmerchform.php; (19) adminpanel/includes/mailinglist/disphtmltbl.php, and (20) adminpanel/includes/mailinglist/dispxls.php.
Affected configurations
• grayscale bandsite cms 1.1.1
Related
Weakness · CWE (1)
- CWE-94 Improper Control of Generation of Code weakness
References
- http://secunia.com/advisories/20768 Vendor Advisory
- http://sourceforge.net/project/shownotes.php?release_id=428062 sourceforge.net
- http://www.osvdb.org/27233 www.osvdb.org
- http://www.osvdb.org/27234 www.osvdb.org
- http://www.osvdb.org/27235 www.osvdb.org
- http://www.osvdb.org/27236 www.osvdb.org
- http://www.osvdb.org/27237 www.osvdb.org
- http://www.osvdb.org/27238 www.osvdb.org
- http://www.osvdb.org/27239 www.osvdb.org
- http://www.osvdb.org/27240 Exploit
- http://www.osvdb.org/27241 Exploit
- http://www.osvdb.org/27242 Exploit
- http://www.osvdb.org/27243 Exploit
- http://www.osvdb.org/27244 Exploit
- http://www.osvdb.org/27245 Exploit
- http://www.osvdb.org/27246 www.osvdb.org
- http://www.osvdb.org/27247 Exploit
- http://www.osvdb.org/27248 Exploit
- http://www.osvdb.org/27249 Exploit
- http://www.osvdb.org/27250 Exploit
- http://www.osvdb.org/27251 Exploit
- http://www.osvdb.org/27252 Exploit
- http://www.securityfocus.com/bid/18555 www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/2462 Vendor Advisory
- https://www.exploit-db.com/exploits/1933 www.exploit-db.com
- http://secunia.com/advisories/20768 Vendor Advisory
- http://sourceforge.net/project/shownotes.php?release_id=428062 sourceforge.net
- http://www.osvdb.org/27233 www.osvdb.org
- http://www.osvdb.org/27234 www.osvdb.org
- http://www.osvdb.org/27235 www.osvdb.org
- http://www.osvdb.org/27236 www.osvdb.org
- http://www.osvdb.org/27237 www.osvdb.org
- http://www.osvdb.org/27238 www.osvdb.org
- http://www.osvdb.org/27239 www.osvdb.org
- http://www.osvdb.org/27240 Exploit
- http://www.osvdb.org/27241 Exploit
- http://www.osvdb.org/27242 Exploit
- http://www.osvdb.org/27243 Exploit
- http://www.osvdb.org/27244 Exploit
- http://www.osvdb.org/27245 Exploit
- http://www.osvdb.org/27246 www.osvdb.org
- http://www.osvdb.org/27247 Exploit
- http://www.osvdb.org/27248 Exploit
- http://www.osvdb.org/27249 Exploit
- http://www.osvdb.org/27250 Exploit
- http://www.osvdb.org/27251 Exploit
- http://www.osvdb.org/27252 Exploit
- http://www.securityfocus.com/bid/18555 www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/2462 Vendor Advisory
- https://www.exploit-db.com/exploits/1933 www.exploit-db.com