CVE-2006-3475 - Vulnerability Details - OpenCVE

Multiple PHP remote file inclusion vulnerabilities in free QBoard 1.1 allow remote attackers to execute arbitrary PHP code via a URL in the qb_path parameter to (1) index.php, (2) about.php, (3) contact.php, (4) delete.php, (5) faq.php, (6) features.php or (7) history.php, a different set of vectors than CVE-2006-2998.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Free Qboard	Free Qboard

Configuration 1 [-]

cpe:2.3:a:free_qboard:free_qboard:1.1:*:*:*:*:*:*:*

No data.

References

Link	Providers
http://securityreason.com/securityalert/1233
http://securitytracker.com/id?1016433
http://www.osvdb.org/28059
http://www.osvdb.org/28060
http://www.osvdb.org/28061
http://www.osvdb.org/28062
http://www.osvdb.org/28063
http://www.osvdb.org/28064
http://www.osvdb.org/28065
http://www.securityfocus.com/archive/1/438951/100/0/threaded
http://www.securityfocus.com/archive/1/453293/100/0/threaded
http://www.securityfocus.com/bid/18788
http://www.securityfocus.com/bid/21394
https://exchange.xforce.ibmcloud.com/vulnerabilities/27040

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2006-07-10T20:00:00

Updated: 2024-08-07T18:30:33.890Z

Reserved: 2006-07-10T00:00:00

Link: CVE-2006-3475

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2006-07-10T20:05:00.000

Modified: 2025-04-03T01:03:51.193

Link: CVE-2006-3475

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2006-07-02T00:00:00", "descriptions": [{"lang": "en", "value": "Multiple PHP remote file inclusion vulnerabilities in free QBoard 1.1 allow remote attackers to execute arbitrary PHP code via a URL in the qb_path parameter to (1) index.php, (2) about.php, (3) contact.php, (4) delete.php, (5) faq.php, (6) features.php or (7) history.php, a different set of vectors than CVE-2006-2998."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-10-18T14:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "18788", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/18788"}, {"name": "28059", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/28059"}, {"name": "28064", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/28064"}, {"name": "20060702 free QBoard v1.1 Multiple Remote File include", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/438951/100/0/threaded"}, {"name": "28060", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/28060"}, {"name": "28062", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/28062"}, {"name": "freeqboard-multiple-scripts-file-include(27040)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27040"}, {"name": "28065", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/28065"}, {"name": "28063", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/28063"}, {"name": "20061201 freeqboard <= 1.1 (qb_path) Remote File Include Vulnerability", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/453293/100/0/threaded"}, {"name": "1233", "tags": ["third-party-advisory", "x_refsource_SREASON"], "url": "http://securityreason.com/securityalert/1233"}, {"name": "1016433", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://securitytracker.com/id?1016433"}, {"name": "21394", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/21394"}, {"name": "28061", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/28061"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2006-3475", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Multiple PHP remote file inclusion vulnerabilities in free QBoard 1.1 allow remote attackers to execute arbitrary PHP code via a URL in the qb_path parameter to (1) index.php, (2) about.php, (3) contact.php, (4) delete.php, (5) faq.php, (6) features.php or (7) history.php, a different set of vectors than CVE-2006-2998."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "18788", "refsource": "BID", "url": "http://www.securityfocus.com/bid/18788"}, {"name": "28059", "refsource": "OSVDB", "url": "http://www.osvdb.org/28059"}, {"name": "28064", "refsource": "OSVDB", "url": "http://www.osvdb.org/28064"}, {"name": "20060702 free QBoard v1.1 Multiple Remote File include", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/438951/100/0/threaded"}, {"name": "28060", "refsource": "OSVDB", "url": "http://www.osvdb.org/28060"}, {"name": "28062", "refsource": "OSVDB", "url": "http://www.osvdb.org/28062"}, {"name": "freeqboard-multiple-scripts-file-include(27040)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27040"}, {"name": "28065", "refsource": "OSVDB", "url": "http://www.osvdb.org/28065"}, {"name": "28063", "refsource": "OSVDB", "url": "http://www.osvdb.org/28063"}, {"name": "20061201 freeqboard <= 1.1 (qb_path) Remote File Include Vulnerability", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/453293/100/0/threaded"}, {"name": "1233", "refsource": "SREASON", "url": "http://securityreason.com/securityalert/1233"}, {"name": "1016433", "refsource": "SECTRACK", "url": "http://securitytracker.com/id?1016433"}, {"name": "21394", "refsource": "BID", "url": "http://www.securityfocus.com/bid/21394"}, {"name": "28061", "refsource": "OSVDB", "url": "http://www.osvdb.org/28061"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T18:30:33.890Z"}, "title": "CVE Program Container", "references": [{"name": "18788", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/18788"}, {"name": "28059", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/28059"}, {"name": "28064", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/28064"}, {"name": "20060702 free QBoard v1.1 Multiple Remote File include", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://www.securityfocus.com/archive/1/438951/100/0/threaded"}, {"name": "28060", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/28060"}, {"name": "28062", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/28062"}, {"name": "freeqboard-multiple-scripts-file-include(27040)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27040"}, {"name": "28065", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/28065"}, {"name": "28063", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/28063"}, {"name": "20061201 freeqboard <= 1.1 (qb_path) Remote File Include Vulnerability", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://www.securityfocus.com/archive/1/453293/100/0/threaded"}, {"name": "1233", "tags": ["third-party-advisory", "x_refsource_SREASON", "x_transferred"], "url": "http://securityreason.com/securityalert/1233"}, {"name": "1016433", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://securitytracker.com/id?1016433"}, {"name": "21394", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/21394"}, {"name": "28061", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/28061"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2006-3475", "datePublished": "2006-07-10T20:00:00", "dateReserved": "2006-07-10T00:00:00", "dateUpdated": "2024-08-07T18:30:33.890Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:free_qboard:free_qboard:1.1:*:*:*:*:*:*:*", "matchCriteriaId": "5DE640F9-5C01-431A-A141-B286F9E763C8", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Multiple PHP remote file inclusion vulnerabilities in free QBoard 1.1 allow remote attackers to execute arbitrary PHP code via a URL in the qb_path parameter to (1) index.php, (2) about.php, (3) contact.php, (4) delete.php, (5) faq.php, (6) features.php or (7) history.php, a different set of vectors than CVE-2006-2998."}, {"lang": "es", "value": "M\u00faltiples inclusiones de archivos PHP remotos en free QBoard 1.1 permiten a atacantes remotos ejecutar c\u00f3digo PHP de su elecci\u00f3n a trav\u00e9s de un URL en el par\u00e1metro qb_path a (1) index.php, (2) about.php, (3) contact.php, (4) delete.php, (5) faq.php, (6) features.php o (7) history.php, un conjunto de vectores distinto a CVE-2006-2998."}], "id": "CVE-2006-3475", "lastModified": "2025-04-03T01:03:51.193", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": true, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2006-07-10T20:05:00.000", "references": [{"source": "cve@mitre.org", "url": "http://securityreason.com/securityalert/1233"}, {"source": "cve@mitre.org", "url": "http://securitytracker.com/id?1016433"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/28059"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/28060"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/28061"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/28062"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/28063"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/28064"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/28065"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/archive/1/438951/100/0/threaded"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/archive/1/453293/100/0/threaded"}, {"source": "cve@mitre.org", "tags": ["Exploit"], "url": "http://www.securityfocus.com/bid/18788"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/bid/21394"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27040"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://securityreason.com/securityalert/1233"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://securitytracker.com/id?1016433"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.osvdb.org/28059"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.osvdb.org/28060"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.osvdb.org/28061"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.osvdb.org/28062"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.osvdb.org/28063"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.osvdb.org/28064"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.osvdb.org/28065"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/archive/1/438951/100/0/threaded"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/archive/1/453293/100/0/threaded"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit"], "url": "http://www.securityfocus.com/bid/18788"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/21394"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27040"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}