{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2006-09-21T00:00:00", "descriptions": [{"lang": "en", "value": "Multiple PHP remote file inclusion vulnerabilities in SolidState 0.4 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the base_path parameter in manager/pages/ scripts including (1) AccountsPage.class.php, (2) AddInvoicePage.class.php, (3) AddIPAddressPage.class.php, (4) AddPaymentPage.class.php, (5) AddTaxRulePage.class.php, (6) AssignDomainPage.class.php, (7) AssignHostingPage.class.php, (8) AssignProductPage.class.php, (9) BillingPage.class.php, (10) BillingPaymentPage.class.php, (11) BrowseAccountsPage.class.php, (12) BrowseInvoicesPage.class.php, (13) ConfigureEditUserPage.class.php, (14) ConfigureNewUserPage.class.php, (15) ConfigureNewUserReceiptPage.class.php, (16) ConfigureUsersPage.class.php, (17) DeleteAccountPage.class.php, (18) DeleteDomainServicePage.class.php, (19) DeleteHostingServicePage.class.php, (20) DeleteInvoicePage.class.php, (21) DeleteProductPage.class.php, (22) DeleteServerPage.class.php, (23) DomainServicesPage.class.php, (24) DomainsPage.class.php, (25) EditAccountPage.class.php, (26) EditDomainPage.class.php, (27) EditDomainServicePage.class.php, (28) EditHostingServicePage.class.php, (29) EditPaymentPage.class.php, (30) EditProductPage.class.php, (31) EditServerPage.class.php, (32) EmailInvoicePage.class.php, (33) ExecuteOrderPage.class.php, (34) ExpiredDomainsPage.class.php, (35) FulfilledOrdersPage.class.php, (36) GenerateInvoicesPage.class.php, (37) HomePage.class.php, (38) InactiveAccountsPage.class.php, (39) IPManagerPage.class.php, (40) LoginPage.class.php, (41) LogPage.class.php, (42) ModulesPage.class.php, (43) NewAccountPage.class.php, (44) NewDomainServicePage.class.php, (45) NewProductPage.class.php, (46) OutstandingInvoicesPage.class.php, (47) PendingAccountsPage.class.php, (48) PendingOrdersPage.class.php, (49) PrintInvoicePage.class.php, (50) ProductsPage.class.php, (51) RegisterDomainPage.class.php, (52) RegisteredDomainsPage.class.php, (53) ServersPage.class.php, (54) ServicesHostingServicesPage.class.php, (55) ServicesNewHostingPage.class.php, (56) ServicesPage.class.php, (57) ServicesWebHostingPage.class.php, (58) SettingsPage.class.php, (59) TaxesPage.class.php, (60) TransferDomainPage.class.php, (61) ViewAccountPage.class.php, (62) ViewDomainServicePage.class.php, (63) ViewHostingServicePage.class.php, (64) ViewInvoicePage.class.php, (65) ViewLogMessagePage.class.php, (66) ViewOrderPage.class.php, (67) ViewProductPage.class.php, (68) ViewServerPage.class.php, (69) WelcomeEmailPage.class.php; and (70) modules/RegistrarModule.class.php, (71) modules/SolidStateModule.class.php, (72) modules/authorizeaim/authorizeaim.class.php, and (73) modules/authorizeaim/pages/AAIMConfigPage.class.php."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-10-18T16:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "solidstate-basepath-file-include(29095)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/29095"}, {"name": "31120", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/31120"}, {"name": "31147", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/31147"}, {"name": "31141", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/31141"}, {"name": "31139", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/31139"}, {"name": "31192", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/31192"}, {"name": "31106", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/31106"}, {"name": "31135", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/31135"}, {"name": "31117", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/31117"}, {"name": "20070106 vendor ack: SolidState RFI", "tags": ["mailing-list", "x_refsource_VIM"], "url": "http://attrition.org/pipermail/vim/2007-January/001210.html"}, {"name": "31144", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/31144"}, {"name": "21934", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/21934"}, {"name": "31100", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/31100"}, {"name": "31112", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/31112"}, {"name": "31109", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/31109"}, {"name": "31193", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/31193"}, {"name": "31115", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/31115"}, {"name": "31131", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/31131"}, {"name": "31203", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/31203"}, {"name": "31194", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/31194"}, {"name": "31146", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/31146"}, {"name": "31191", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/31191"}, {"name": "31105", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/31105"}, {"name": "31119", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/31119"}, {"name": "31197", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/31197"}, {"name": "31136", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/31136"}, {"name": "31116", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/31116"}, {"name": "31099", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/31099"}, {"name": "31114", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/31114"}, {"name": "31134", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/31134"}, {"name": "31190", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/31190"}, {"name": "31145", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/31145"}, {"name": "31122", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/31122"}, {"name": "31111", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/31111"}, {"name": "31104", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/31104"}, {"name": "31113", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/31113"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://www.solid-state.org/index.php?name=PNphpBB2&file=portal&article=1"}, {"name": "31199", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/31199"}, {"name": "31128", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/31128"}, {"name": "2413", "tags": ["exploit", "x_refsource_EXPLOIT-DB"], "url": "https://www.exploit-db.com/exploits/2413"}, {"name": "31125", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/31125"}, {"name": "31107", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/31107"}, {"name": "31098", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/31098"}, {"name": "31137", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/31137"}, {"name": "31200", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/31200"}, {"name": "31143", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/31143"}, {"name": "31198", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/31198"}, {"name": "31123", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/31123"}, {"name": "31126", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/31126"}, {"name": "31124", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/31124"}, {"name": "31201", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/31201"}, {"name": "31097", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/31097"}, {"name": "31110", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/31110"}, {"name": "31121", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/31121"}, {"name": "31133", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/31133"}, {"name": "31138", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/31138"}, {"name": "31130", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/31130"}, {"name": "31127", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/31127"}, {"name": "31202", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/31202"}, {"name": "31108", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/31108"}, {"name": "31129", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/31129"}, {"name": "31132", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/31132"}, {"name": "31118", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/31118"}, {"name": "31142", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/31142"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2006-5020", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Multiple PHP remote file inclusion vulnerabilities in SolidState 0.4 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the base_path parameter in manager/pages/ scripts including (1) AccountsPage.class.php, (2) AddInvoicePage.class.php, (3) AddIPAddressPage.class.php, (4) AddPaymentPage.class.php, (5) AddTaxRulePage.class.php, (6) AssignDomainPage.class.php, (7) AssignHostingPage.class.php, (8) AssignProductPage.class.php, (9) BillingPage.class.php, (10) BillingPaymentPage.class.php, (11) BrowseAccountsPage.class.php, (12) BrowseInvoicesPage.class.php, (13) ConfigureEditUserPage.class.php, (14) ConfigureNewUserPage.class.php, (15) ConfigureNewUserReceiptPage.class.php, (16) ConfigureUsersPage.class.php, (17) DeleteAccountPage.class.php, (18) DeleteDomainServicePage.class.php, (19) DeleteHostingServicePage.class.php, (20) DeleteInvoicePage.class.php, (21) DeleteProductPage.class.php, (22) DeleteServerPage.class.php, (23) DomainServicesPage.class.php, (24) DomainsPage.class.php, (25) EditAccountPage.class.php, (26) EditDomainPage.class.php, (27) EditDomainServicePage.class.php, (28) EditHostingServicePage.class.php, (29) EditPaymentPage.class.php, (30) EditProductPage.class.php, (31) EditServerPage.class.php, (32) EmailInvoicePage.class.php, (33) ExecuteOrderPage.class.php, (34) ExpiredDomainsPage.class.php, (35) FulfilledOrdersPage.class.php, (36) GenerateInvoicesPage.class.php, (37) HomePage.class.php, (38) InactiveAccountsPage.class.php, (39) IPManagerPage.class.php, (40) LoginPage.class.php, (41) LogPage.class.php, (42) ModulesPage.class.php, (43) NewAccountPage.class.php, (44) NewDomainServicePage.class.php, (45) NewProductPage.class.php, (46) OutstandingInvoicesPage.class.php, (47) PendingAccountsPage.class.php, (48) PendingOrdersPage.class.php, (49) PrintInvoicePage.class.php, (50) ProductsPage.class.php, (51) RegisterDomainPage.class.php, (52) RegisteredDomainsPage.class.php, (53) ServersPage.class.php, (54) ServicesHostingServicesPage.class.php, (55) ServicesNewHostingPage.class.php, (56) ServicesPage.class.php, (57) ServicesWebHostingPage.class.php, (58) SettingsPage.class.php, (59) TaxesPage.class.php, (60) TransferDomainPage.class.php, (61) ViewAccountPage.class.php, (62) ViewDomainServicePage.class.php, (63) ViewHostingServicePage.class.php, (64) ViewInvoicePage.class.php, (65) ViewLogMessagePage.class.php, (66) ViewOrderPage.class.php, (67) ViewProductPage.class.php, (68) ViewServerPage.class.php, (69) WelcomeEmailPage.class.php; and (70) modules/RegistrarModule.class.php, (71) modules/SolidStateModule.class.php, (72) modules/authorizeaim/authorizeaim.class.php, and (73) modules/authorizeaim/pages/AAIMConfigPage.class.php."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "solidstate-basepath-file-include(29095)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/29095"}, {"name": "31120", "refsource": "OSVDB", "url": "http://www.osvdb.org/31120"}, {"name": "31147", "refsource": "OSVDB", "url": "http://www.osvdb.org/31147"}, {"name": "31141", "refsource": "OSVDB", "url": "http://www.osvdb.org/31141"}, {"name": "31139", "refsource": "OSVDB", "url": "http://www.osvdb.org/31139"}, {"name": "31192", "refsource": "OSVDB", "url": "http://www.osvdb.org/31192"}, {"name": "31106", "refsource": "OSVDB", "url": "http://www.osvdb.org/31106"}, {"name": "31135", "refsource": "OSVDB", "url": "http://www.osvdb.org/31135"}, {"name": "31117", "refsource": "OSVDB", "url": "http://www.osvdb.org/31117"}, {"name": "20070106 vendor ack: SolidState RFI", "refsource": "VIM", "url": "http://attrition.org/pipermail/vim/2007-January/001210.html"}, {"name": "31144", "refsource": "OSVDB", "url": "http://www.osvdb.org/31144"}, {"name": "21934", "refsource": "BID", "url": "http://www.securityfocus.com/bid/21934"}, {"name": "31100", "refsource": "OSVDB", "url": "http://www.osvdb.org/31100"}, {"name": "31112", "refsource": "OSVDB", "url": "http://www.osvdb.org/31112"}, {"name": "31109", "refsource": "OSVDB", "url": "http://www.osvdb.org/31109"}, {"name": "31193", "refsource": "OSVDB", "url": "http://www.osvdb.org/31193"}, {"name": "31115", "refsource": "OSVDB", "url": "http://www.osvdb.org/31115"}, {"name": "31131", "refsource": "OSVDB", "url": "http://www.osvdb.org/31131"}, {"name": "31203", "refsource": "OSVDB", "url": "http://www.osvdb.org/31203"}, {"name": "31194", "refsource": "OSVDB", "url": "http://www.osvdb.org/31194"}, {"name": "31146", "refsource": "OSVDB", "url": "http://www.osvdb.org/31146"}, {"name": "31191", "refsource": "OSVDB", "url": "http://www.osvdb.org/31191"}, {"name": "31105", "refsource": "OSVDB", "url": "http://www.osvdb.org/31105"}, {"name": "31119", "refsource": "OSVDB", "url": "http://www.osvdb.org/31119"}, {"name": "31197", "refsource": "OSVDB", "url": "http://www.osvdb.org/31197"}, {"name": "31136", "refsource": "OSVDB", "url": "http://www.osvdb.org/31136"}, {"name": "31116", "refsource": "OSVDB", "url": "http://www.osvdb.org/31116"}, {"name": "31099", "refsource": "OSVDB", "url": "http://www.osvdb.org/31099"}, {"name": "31114", "refsource": "OSVDB", "url": "http://www.osvdb.org/31114"}, {"name": "31134", "refsource": "OSVDB", "url": "http://www.osvdb.org/31134"}, {"name": "31190", "refsource": "OSVDB", "url": "http://www.osvdb.org/31190"}, {"name": "31145", "refsource": "OSVDB", "url": "http://www.osvdb.org/31145"}, {"name": "31122", "refsource": "OSVDB", "url": "http://www.osvdb.org/31122"}, {"name": "31111", "refsource": "OSVDB", "url": "http://www.osvdb.org/31111"}, {"name": "31104", "refsource": "OSVDB", "url": "http://www.osvdb.org/31104"}, {"name": "31113", "refsource": "OSVDB", "url": "http://www.osvdb.org/31113"}, {"name": "http://www.solid-state.org/index.php?name=PNphpBB2&file=portal&article=1", "refsource": "CONFIRM", "url": "http://www.solid-state.org/index.php?name=PNphpBB2&file=portal&article=1"}, {"name": "31199", "refsource": "OSVDB", "url": "http://www.osvdb.org/31199"}, {"name": "31128", "refsource": "OSVDB", "url": "http://www.osvdb.org/31128"}, {"name": "2413", "refsource": "EXPLOIT-DB", "url": "https://www.exploit-db.com/exploits/2413"}, {"name": "31125", "refsource": "OSVDB", "url": "http://www.osvdb.org/31125"}, {"name": "31107", "refsource": "OSVDB", "url": "http://www.osvdb.org/31107"}, {"name": "31098", "refsource": "OSVDB", "url": "http://www.osvdb.org/31098"}, {"name": "31137", "refsource": "OSVDB", "url": "http://www.osvdb.org/31137"}, {"name": "31200", "refsource": "OSVDB", "url": "http://www.osvdb.org/31200"}, {"name": "31143", "refsource": "OSVDB", "url": "http://www.osvdb.org/31143"}, {"name": "31198", "refsource": "OSVDB", "url": "http://www.osvdb.org/31198"}, {"name": "31123", "refsource": "OSVDB", "url": "http://www.osvdb.org/31123"}, {"name": "31126", "refsource": "OSVDB", "url": "http://www.osvdb.org/31126"}, {"name": "31124", "refsource": "OSVDB", "url": "http://www.osvdb.org/31124"}, {"name": "31201", "refsource": "OSVDB", "url": "http://www.osvdb.org/31201"}, {"name": "31097", "refsource": "OSVDB", "url": "http://www.osvdb.org/31097"}, {"name": "31110", "refsource": "OSVDB", "url": "http://www.osvdb.org/31110"}, {"name": "31121", "refsource": "OSVDB", "url": "http://www.osvdb.org/31121"}, {"name": "31133", "refsource": "OSVDB", "url": "http://www.osvdb.org/31133"}, {"name": "31138", "refsource": "OSVDB", "url": "http://www.osvdb.org/31138"}, {"name": "31130", "refsource": "OSVDB", "url": "http://www.osvdb.org/31130"}, {"name": "31127", "refsource": "OSVDB", "url": "http://www.osvdb.org/31127"}, {"name": "31202", "refsource": "OSVDB", "url": "http://www.osvdb.org/31202"}, {"name": "31108", "refsource": "OSVDB", "url": "http://www.osvdb.org/31108"}, {"name": "31129", "refsource": "OSVDB", "url": "http://www.osvdb.org/31129"}, {"name": "31132", "refsource": "OSVDB", "url": "http://www.osvdb.org/31132"}, {"name": "31118", "refsource": "OSVDB", "url": "http://www.osvdb.org/31118"}, {"name": "31142", "refsource": "OSVDB", "url": "http://www.osvdb.org/31142"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T19:32:22.868Z"}, "title": "CVE Program Container", "references": [{"name": "solidstate-basepath-file-include(29095)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/29095"}, {"name": "31120", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/31120"}, {"name": "31147", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/31147"}, {"name": "31141", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/31141"}, {"name": "31139", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/31139"}, {"name": "31192", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/31192"}, {"name": "31106", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/31106"}, {"name": "31135", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/31135"}, {"name": "31117", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/31117"}, {"name": "20070106 vendor ack: SolidState RFI", "tags": ["mailing-list", "x_refsource_VIM", "x_transferred"], "url": "http://attrition.org/pipermail/vim/2007-January/001210.html"}, {"name": "31144", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/31144"}, {"name": "21934", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/21934"}, {"name": "31100", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/31100"}, {"name": "31112", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/31112"}, {"name": "31109", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/31109"}, {"name": "31193", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/31193"}, {"name": "31115", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/31115"}, {"name": "31131", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/31131"}, {"name": "31203", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/31203"}, {"name": "31194", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/31194"}, {"name": "31146", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/31146"}, {"name": "31191", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/31191"}, {"name": "31105", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/31105"}, {"name": "31119", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/31119"}, {"name": "31197", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/31197"}, {"name": "31136", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/31136"}, {"name": "31116", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/31116"}, {"name": "31099", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/31099"}, {"name": "31114", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/31114"}, {"name": "31134", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/31134"}, {"name": "31190", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/31190"}, {"name": "31145", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/31145"}, {"name": "31122", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/31122"}, {"name": "31111", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/31111"}, {"name": "31104", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/31104"}, {"name": "31113", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/31113"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://www.solid-state.org/index.php?name=PNphpBB2&file=portal&article=1"}, {"name": "31199", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/31199"}, {"name": "31128", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/31128"}, {"name": "2413", "tags": ["exploit", "x_refsource_EXPLOIT-DB", "x_transferred"], "url": "https://www.exploit-db.com/exploits/2413"}, {"name": "31125", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/31125"}, {"name": "31107", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/31107"}, {"name": "31098", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/31098"}, {"name": "31137", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/31137"}, {"name": "31200", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/31200"}, {"name": "31143", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/31143"}, {"name": "31198", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/31198"}, {"name": "31123", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/31123"}, {"name": "31126", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/31126"}, {"name": "31124", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/31124"}, {"name": "31201", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/31201"}, {"name": "31097", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/31097"}, {"name": "31110", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/31110"}, {"name": "31121", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/31121"}, {"name": "31133", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/31133"}, {"name": "31138", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/31138"}, {"name": "31130", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/31130"}, {"name": "31127", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/31127"}, {"name": "31202", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/31202"}, {"name": "31108", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/31108"}, {"name": "31129", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/31129"}, {"name": "31132", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/31132"}, {"name": "31118", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/31118"}, {"name": "31142", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/31142"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2006-5020", "datePublished": "2006-09-27T23:00:00", "dateReserved": "2006-09-27T00:00:00", "dateUpdated": "2024-08-07T19:32:22.868Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:solidstate:solidstate:*:*:*:*:*:*:*:*", "matchCriteriaId": "3926D4E5-71C8-4871-BD2D-8450F8EF9B43", "versionEndIncluding": "0.4", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Multiple PHP remote file inclusion vulnerabilities in SolidState 0.4 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the base_path parameter in manager/pages/ scripts including (1) AccountsPage.class.php, (2) AddInvoicePage.class.php, (3) AddIPAddressPage.class.php, (4) AddPaymentPage.class.php, (5) AddTaxRulePage.class.php, (6) AssignDomainPage.class.php, (7) AssignHostingPage.class.php, (8) AssignProductPage.class.php, (9) BillingPage.class.php, (10) BillingPaymentPage.class.php, (11) BrowseAccountsPage.class.php, (12) BrowseInvoicesPage.class.php, (13) ConfigureEditUserPage.class.php, (14) ConfigureNewUserPage.class.php, (15) ConfigureNewUserReceiptPage.class.php, (16) ConfigureUsersPage.class.php, (17) DeleteAccountPage.class.php, (18) DeleteDomainServicePage.class.php, (19) DeleteHostingServicePage.class.php, (20) DeleteInvoicePage.class.php, (21) DeleteProductPage.class.php, (22) DeleteServerPage.class.php, (23) DomainServicesPage.class.php, (24) DomainsPage.class.php, (25) EditAccountPage.class.php, (26) EditDomainPage.class.php, (27) EditDomainServicePage.class.php, (28) EditHostingServicePage.class.php, (29) EditPaymentPage.class.php, (30) EditProductPage.class.php, (31) EditServerPage.class.php, (32) EmailInvoicePage.class.php, (33) ExecuteOrderPage.class.php, (34) ExpiredDomainsPage.class.php, (35) FulfilledOrdersPage.class.php, (36) GenerateInvoicesPage.class.php, (37) HomePage.class.php, (38) InactiveAccountsPage.class.php, (39) IPManagerPage.class.php, (40) LoginPage.class.php, (41) LogPage.class.php, (42) ModulesPage.class.php, (43) NewAccountPage.class.php, (44) NewDomainServicePage.class.php, (45) NewProductPage.class.php, (46) OutstandingInvoicesPage.class.php, (47) PendingAccountsPage.class.php, (48) PendingOrdersPage.class.php, (49) PrintInvoicePage.class.php, (50) ProductsPage.class.php, (51) RegisterDomainPage.class.php, (52) RegisteredDomainsPage.class.php, (53) ServersPage.class.php, (54) ServicesHostingServicesPage.class.php, (55) ServicesNewHostingPage.class.php, (56) ServicesPage.class.php, (57) ServicesWebHostingPage.class.php, (58) SettingsPage.class.php, (59) TaxesPage.class.php, (60) TransferDomainPage.class.php, (61) ViewAccountPage.class.php, (62) ViewDomainServicePage.class.php, (63) ViewHostingServicePage.class.php, (64) ViewInvoicePage.class.php, (65) ViewLogMessagePage.class.php, (66) ViewOrderPage.class.php, (67) ViewProductPage.class.php, (68) ViewServerPage.class.php, (69) WelcomeEmailPage.class.php; and (70) modules/RegistrarModule.class.php, (71) modules/SolidStateModule.class.php, (72) modules/authorizeaim/authorizeaim.class.php, and (73) modules/authorizeaim/pages/AAIMConfigPage.class.php."}, {"lang": "es", "value": "Vulnerabilidad PHP de inclusi\u00f3n remota de archivo en SolidState 0.4 y anteriores permite a un atacante remoto ejecutar c\u00f3digo PHP de su elecci\u00f3n a trav\u00e9s de una URL en el par\u00e1metro base_path en las secuencias de comandos manager/pages incluyendo \r\n1) AccountsPage.class.php, (2) AddInvoicePage.class.php, (3) AddIPAddressPage.class.php, (4) AddPaymentPage.class.php, (5) AddTaxRulePage.class.php, (6) AssignDomainPage.class.php, (7) AssignHostingPage.class.php, (8) AssignProductPage.class.php, (9) BillingPage.class.php, (10) BillingPaymentPage.class.php, (11) BrowseAccountsPage.class.php, (12) BrowseInvoicesPage.class.php, (13) ConfigureEditUserPage.class.php, (14) ConfigureNewUserPage.class.php, (15) ConfigureNewUserReceiptPage.class.php, (16) ConfigureUsersPage.class.php, (17) DeleteAccountPage.class.php, (18) DeleteDomainServicePage.class.php, (19) DeleteHostingServicePage.class.php, (20) DeleteInvoicePage.class.php, (21) DeleteProductPage.class.php, (22) DeleteServerPage.class.php, (23) DomainServicesPage.class.php, (24) DomainsPage.class.php, (25) EditAccountPage.class.php, (26) EditDomainPage.class.php, (27) EditDomainServicePage.class.php, (28) EditHostingServicePage.class.php, (29) EditPaymentPage.class.php, (30) EditProductPage.class.php, (31) EditServerPage.class.php, (32) EmailInvoicePage.class.php, (33) ExecuteOrderPage.class.php, (34) ExpiredDomainsPage.class.php, (35) FulfilledOrdersPage.class.php, (36) GenerateInvoicesPage.class.php, (37) HomePage.class.php, (38) InactiveAccountsPage.class.php, (39) IPManagerPage.class.php, (40) LoginPage.class.php, (41) LogPage.class.php, (42) ModulesPage.class.php, (43) NewAccountPage.class.php, (44) NewDomainServicePage.class.php, (45) NewProductPage.class.php, (46) OutstandingInvoicesPage.class.php, (47) PendingAccountsPage.class.php, (48) PendingOrdersPage.class.php, (49) PrintInvoicePage.class.php, (50) ProductsPage.class.php, (51) RegisterDomainPage.class.php, (52) RegisteredDomainsPage.class.php, (53) ServersPage.class.php, (54) ServicesHostingServicesPage.class.php, (55) ServicesNewHostingPage.class.php, (56) ServicesPage.class.php, (57) ServicesWebHostingPage.class.php, (58) SettingsPage.class.php, (59) TaxesPage.class.php, (60) TransferDomainPage.class.php, (61) ViewAccountPage.class.php, (62) ViewDomainServicePage.class.php, (63) ViewHostingServicePage.class.php, (64) ViewInvoicePage.class.php, (65) ViewLogMessagePage.class.php, (66) ViewOrderPage.class.php, (67) ViewProductPage.class.php, (68) ViewServerPage.class.php, (69) WelcomeEmailPage.class.php; and (70) modules/RegistrarModule.class.php, (71) modules/SolidStateModule.class.php, (72) modules/authorizeaim/authorizeaim.class.php, y (73) modules/authorizeaim/pages/AAIMConfigPage.class.php.\r\n"}], "id": "CVE-2006-5020", "lastModified": "2017-10-19T01:29:28.173", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": true, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2006-09-27T23:07:00.000", "references": [{"source": "cve@mitre.org", "url": "http://attrition.org/pipermail/vim/2007-January/001210.html"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/31097"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/31098"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/31099"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/31100"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/31104"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/31105"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/31106"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/31107"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/31108"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/31109"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/31110"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/31111"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/31112"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/31113"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/31114"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/31115"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/31116"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/31117"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/31118"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/31119"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/31120"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/31121"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/31122"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/31123"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/31124"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/31125"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/31126"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/31127"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/31128"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/31129"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/31130"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/31131"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/31132"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/31133"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/31134"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/31135"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/31136"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/31137"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/31138"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/31139"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/31141"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/31142"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/31143"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/31144"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/31145"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/31146"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/31147"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/31190"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/31191"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/31192"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/31193"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/31194"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/31197"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/31198"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/31199"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/31200"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/31201"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/31202"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/31203"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/bid/21934"}, {"source": "cve@mitre.org", "url": "http://www.solid-state.org/index.php?name=PNphpBB2&file=portal&article=1"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/29095"}, {"source": "cve@mitre.org", "url": "https://www.exploit-db.com/exploits/2413"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}