CVE-2006-4559

State: Published
Severity: Not scored
Published: Sep 6, 2006
Updated: Aug 7, 2024
Reserved: Sep 5, 2006

Description

Multiple PHP remote file inclusion vulnerabilities in Yet Another Community System (YACS) CMS 6.6.1 allow remote attackers to execute arbitrary PHP code via a URL in the context[path_to_root] parameter in (1) articles/populate.php, (2) categories/category.php, (3) categories/populate.php, (4) comments/populate.php, (5) files/file.php, (6) sections/section.php, (7) sections/populate.php, (8) tables/populate.php, (9) users/user.php, and (10) users/populate.php. The articles/article.php vector is covered by CVE-2006-4532.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

31303vdb-entry
31304vdb-entry
31305vdb-entry
31310vdb-entry
31306vdb-entry
31302vdb-entry
31301vdb-entry
31307vdb-entry
http://www.yetanothercommunitysystem.com/yacs/articles/view.php/1664
31308vdb-entry
31309vdb-entry
21680third-party-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.