CVE-2006-3683 - Vulnerability Details - OpenCVE

PHP remote file inclusion vulnerability in poll.php in Flipper Poll 1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the root_path parameter.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Flipper Poll	Flipper Poll

Configuration 1 [-]

cpe:2.3:a:flipper_poll:flipper_poll:*:*:*:*:*:*:*:*

No data.

References

Link	Providers
http://marc.info/?l=bugtraq&m=115031160401269&w=2
http://packetstormsecurity.org/0606-exploits/flipper.txt
http://secunia.com/advisories/20632
http://securitytracker.com/id?1016489
http://www.osvdb.org/26503
http://www.securityfocus.com/archive/1/439971/100/0/threaded
http://www.securityfocus.com/bid/18461
http://www.vupen.com/english/advisories/2006/2353
https://exchange.xforce.ibmcloud.com/vulnerabilities/27203

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2006-07-18T21:00:00

Updated: 2024-08-07T18:39:53.588Z

Reserved: 2006-07-18T00:00:00

Link: CVE-2006-3683

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2006-07-21T14:03:00.000

Modified: 2025-04-03T01:03:51.193

Link: CVE-2006-3683

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2006-06-14T00:00:00", "descriptions": [{"lang": "en", "value": "PHP remote file inclusion vulnerability in poll.php in Flipper Poll 1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the root_path parameter."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-10-18T14:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "26503", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/26503"}, {"tags": ["x_refsource_MISC"], "url": "http://packetstormsecurity.org/0606-exploits/flipper.txt"}, {"name": "20060614 Flipper Poll (root_path) Remote File Inclusion", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://marc.info/?l=bugtraq&m=115031160401269&w=2"}, {"name": "20060713 Flipper Poll <= 1.1.0 Remote File Inclusion Vulnerability", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/439971/100/0/threaded"}, {"name": "1016489", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://securitytracker.com/id?1016489"}, {"name": "flipperpoll-poll-file-include(27203)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27203"}, {"name": "ADV-2006-2353", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2006/2353"}, {"name": "18461", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/18461"}, {"name": "20632", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/20632"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2006-3683", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "PHP remote file inclusion vulnerability in poll.php in Flipper Poll 1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the root_path parameter."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "26503", "refsource": "OSVDB", "url": "http://www.osvdb.org/26503"}, {"name": "http://packetstormsecurity.org/0606-exploits/flipper.txt", "refsource": "MISC", "url": "http://packetstormsecurity.org/0606-exploits/flipper.txt"}, {"name": "20060614 Flipper Poll (root_path) Remote File Inclusion", "refsource": "BUGTRAQ", "url": "http://marc.info/?l=bugtraq&m=115031160401269&w=2"}, {"name": "20060713 Flipper Poll <= 1.1.0 Remote File Inclusion Vulnerability", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/439971/100/0/threaded"}, {"name": "1016489", "refsource": "SECTRACK", "url": "http://securitytracker.com/id?1016489"}, {"name": "flipperpoll-poll-file-include(27203)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27203"}, {"name": "ADV-2006-2353", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2006/2353"}, {"name": "18461", "refsource": "BID", "url": "http://www.securityfocus.com/bid/18461"}, {"name": "20632", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/20632"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T18:39:53.588Z"}, "title": "CVE Program Container", "references": [{"name": "26503", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/26503"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://packetstormsecurity.org/0606-exploits/flipper.txt"}, {"name": "20060614 Flipper Poll (root_path) Remote File Inclusion", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://marc.info/?l=bugtraq&m=115031160401269&w=2"}, {"name": "20060713 Flipper Poll <= 1.1.0 Remote File Inclusion Vulnerability", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://www.securityfocus.com/archive/1/439971/100/0/threaded"}, {"name": "1016489", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://securitytracker.com/id?1016489"}, {"name": "flipperpoll-poll-file-include(27203)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27203"}, {"name": "ADV-2006-2353", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2006/2353"}, {"name": "18461", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/18461"}, {"name": "20632", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/20632"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2006-3683", "datePublished": "2006-07-18T21:00:00", "dateReserved": "2006-07-18T00:00:00", "dateUpdated": "2024-08-07T18:39:53.588Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:flipper_poll:flipper_poll:*:*:*:*:*:*:*:*", "matchCriteriaId": "F634EDD3-45AA-455B-902A-215E1409CAAB", "versionEndIncluding": "1.1", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "PHP remote file inclusion vulnerability in poll.php in Flipper Poll 1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the root_path parameter."}, {"lang": "es", "value": "Vulnerabilidad de inclusi\u00f3n remota de archivo en PHP en poll.php de Flipper Poll 1.1 y anteriores permite a atacantes remotos ejecutar c\u00f3digo PHP de su elecci\u00f3n mediante un URL en el par\u00e1metro root_path."}], "id": "CVE-2006-3683", "lastModified": "2025-04-03T01:03:51.193", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": true, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2006-07-21T14:03:00.000", "references": [{"source": "cve@mitre.org", "url": "http://marc.info/?l=bugtraq&m=115031160401269&w=2"}, {"source": "cve@mitre.org", "url": "http://packetstormsecurity.org/0606-exploits/flipper.txt"}, {"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/20632"}, {"source": "cve@mitre.org", "tags": ["Exploit"], "url": "http://securitytracker.com/id?1016489"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/26503"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/archive/1/439971/100/0/threaded"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/bid/18461"}, {"source": "cve@mitre.org", "url": "http://www.vupen.com/english/advisories/2006/2353"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27203"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://marc.info/?l=bugtraq&m=115031160401269&w=2"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://packetstormsecurity.org/0606-exploits/flipper.txt"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/20632"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit"], "url": "http://securitytracker.com/id?1016489"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.osvdb.org/26503"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/archive/1/439971/100/0/threaded"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/18461"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.vupen.com/english/advisories/2006/2353"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27203"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}