CyberSec.Space Logo
CVEブラウザに戻る

CVE-2006-1662

HIGH
7.5
CVSS Severity Score
EPSS Score0.1650%
EPSS Percentile35.47th
Published2006年4月7日
Last Modified2026年4月16日

Vulnerability Description

The frontpage option in Limbo CMS 1.0.4.2 and 1.0.4.1 allows remote attackers to execute arbitrary PHP commands via the Itemid parameter in index.php.

Affected Platforms (CPE)

📦
Limbo Cms

Limbo Cms

= 1.0.4.1
📦
Limbo Cms

Limbo Cms

= 1.0.4.2

References & Advisories

🔗 http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0728.html
🔗 http://securityreason.com/securityalert/519
🔗 http://www.securityfocus.com/archive/1/426428
🔗 http://www.securityfocus.com/archive/1/429946/100/0/threaded
🔗 http://www.securityfocus.com/bid/16902
🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/24992
🔗 http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0728.html
🔗 http://securityreason.com/securityalert/519

関連する脆弱性情報

CVE-2006-486010.0

Multiple unspecified vulnerabilities in (1) index.php, (2) minixml.inc.php, (3) doc.inc.php, (4) element.inc.php, (5) node.inc.php...

CVE-2006-48597.5

Unrestricted file upload vulnerability in contact.html.php in the Contact (com_contact) component in Limbo (aka Lite Mambo) CMS 1....

CVE-2005-43187.5

SQL injection vulnerability in index.php in Limbo CMS 1.0.4.2 and earlier, with register_globals off, allows remote attackers to e...

CVE-2008-07347.5

SQL injection vulnerability in class_auth.php in Limbo CMS 1.0.4.2, and possibly earlier versions, allows remote attackers to exec...