CyberSec.Space Logo
返回 CVE 瀏覽器

CVE-2006-0854

HIGH
7.5
CVSS Severity Score
EPSS Score0.1640%
EPSS Percentile3.21th
Published2006年2月23日
Last Modified2026年4月16日

Vulnerability Description

PHP remote file inclusion vulnerability in common.php in Intensive Point iUser Ecommerce allows remote attackers to include arbitrary files via a URL in the include_path variable, which is not initialized before being used.

Affected Platforms (CPE)

📦
Intensive Point

Iuser Ecommerce

All versions

References & Advisories

🔗 http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0339.html
🔗 http://secunia.com/advisories/18903
🔗 http://www.osvdb.org/23429
🔗 http://www.securityfocus.com/bid/16787
🔗 http://www.vupen.com/english/advisories/2006/0699
🔗 http://www.xorcrew.net/xpa/XPA-iUser.txt
🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/24724
🔗 http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0339.html

相關漏洞威脅

CVE-2006-087410.0

Multiple unspecified vulnerabilities in Intensive Point iUser Ecommerce before 2.2 have unspecified vectors and impact, as address...

CVE-2026-121917.8

A vulnerability was found in Comma AI Openpilot 0.11. This issue affects the function pickle.load/pickle.loads of the file selfdri...

CVE-2026-121905.3

A vulnerability has been found in Genspark AI Workspace App 2.8.4 on Android. This vulnerability affects unknown code of the compo...

CVE-2026-121895.3

A flaw has been found in Moovit Bus & Public Transit App 1.18 on Android. This affects an unknown part of the component com.tranzm...