CVEvulnerability
CVE-2006-3584
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2006-08-08
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Dynamic variable evaluation vulnerability in index.php in Jetbox CMS 2.1 SR1 allows remote attackers to overwrite configuration variables via URL parameters, which are evaluated as PHP variable variables.
Affected configurations
• jetbox jetbox cms 2.1
• jetbox jetbox cms 2.1 sr1
References
- http://secunia.com/advisories/20889 Vendor Advisory
- http://secunia.com/secunia_research/2006-57/advisory/ Vendor Advisory
- http://securityreason.com/securityalert/1339 securityreason.com
- http://www.securityfocus.com/archive/1/441980/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/19303 www.securityfocus.com
- http://secunia.com/advisories/20889 Vendor Advisory
- http://secunia.com/secunia_research/2006-57/advisory/ Vendor Advisory
- http://securityreason.com/securityalert/1339 securityreason.com
- http://www.securityfocus.com/archive/1/441980/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/19303 www.securityfocus.com