CVE Feed

    Dashboard / CVE / CVE-2006-3323

    CVE-2006-3323

    PHP remote file inclusion vulnerability in admin/admin.php in MF Piadas 1.0 allows remote attackers to execute arbitrary PHP code via the page parameter. NOTE: the same vector can be used for cross-site scripting, but CVE analysis suggests that this is resultant from file inclusion of HTML or script.

    Published:Jun 30, 2006
    Last Modified:Apr 16, 2026
    EPS:Jun 30, 2006
    EPSS Score:0.12463
    CVSS Score:7.5

    Affected Products

    Vendor
    Mastersfusion
    Product
    Mf Piadas

    Exploits

    http://kurdishsecurity.blogspot.com/2006/06/kurdish-security-10-mf-piadas-10.htmlhttp://www.securityfocus.com/bid/18676http://www.securityfocus.com/bid/18679http://kurdishsecurity.blogspot.com/2006/06/kurdish-security-10-mf-piadas-10.htmlhttp://www.securityfocus.com/bid/18676http://www.securityfocus.com/bid/18679https://www.exploit-db.com/exploits/28115https://www.exploit-db.com/exploits/28117

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    References

    http://kurdishsecurity.blogspot.com/2006/06/kurdish-security-10-mf-piadas-10.html
    http://secunia.com/advisories/20847
    http://securityreason.com/securityalert/1172
    http://www.osvdb.org/26867
    http://www.osvdb.org/26868
    http://www.securityfocus.com/archive/1/438496/100/0/threaded
    http://www.securityfocus.com/bid/18676
    http://www.securityfocus.com/bid/18679
    http://www.vupen.com/english/advisories/2006/2567
    https://exchange.xforce.ibmcloud.com/vulnerabilities/27412
    https://exchange.xforce.ibmcloud.com/vulnerabilities/27415
    http://kurdishsecurity.blogspot.com/2006/06/kurdish-security-10-mf-piadas-10.html
    http://secunia.com/advisories/20847
    http://securityreason.com/securityalert/1172
    http://www.osvdb.org/26867
    http://www.osvdb.org/26868
    http://www.securityfocus.com/archive/1/438496/100/0/threaded
    http://www.securityfocus.com/bid/18676
    http://www.securityfocus.com/bid/18679
    http://www.vupen.com/english/advisories/2006/2567
    https://exchange.xforce.ibmcloud.com/vulnerabilities/27412
    https://exchange.xforce.ibmcloud.com/vulnerabilities/27415

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High