[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cve-CVE-2006-3990":3},{"id":4,"cve_id":5,"euvd_id":6,"summary":7,"published":8,"cvss_data":9,"is_remote":18,"cwes":19,"cpes":21,"technologies":23,"references":25,"score":65,"epss_score":66,"epss_percentile":67,"is_kev":68,"cisa_kev_date_added":69,"cisa_kev_due_date":69,"cisa_ssvc":70,"attack_mappings":76,"exploits":83},122619,"CVE-2006-3990","EUVD-2006-3983","Multiple PHP remote file inclusion vulnerabilities in Paul M. Jones Savant2, possibly when used with the com_mtree component for Mambo and Joomla!, allow remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter in (1) Savant2_Plugin_stylesheet.php, (2) Savant2_Compiler_basic.php, (3) Savant2_Error_pear.php, (4) Savant2_Error_stack.php, (5) Savant2_Filter_colorizeCode.php, (6) Savant2_Filter_trimwhitespace.php, (7) Savant2_Plugin_ahref.php, (8) Savant2_Plugin_ahrefcontact.php, (9) Savant2_Plugin_ahreflisting.php, (10) Savant2_Plugin_ahreflistingimage.php, (11) Savant2_Plugin_ahrefmap.php, (12) Savant2_Plugin_ahrefownerlisting.php, (13) Savant2_Plugin_ahrefprint.php, (14) Savant2_Plugin_ahrefrating.php, (15) Savant2_Plugin_ahrefrecommend.php, (16) Savant2_Plugin_ahrefreport.php, (17) Savant2_Plugin_ahrefreview.php, (18) Savant2_Plugin_ahrefvisit.php, (19) Savant2_Plugin_checkbox.php, (20) Savant2_Plugin_cycle.php, (21) Savant2_Plugin_dateformat.php, (22) Savant2_Plugin_editor.php, (23) Savant2_Plugin_form.php, (24) Savant2_Plugin_image.php, (25) Savant2_Plugin_input.php, (26) Savant2_Plugin_javascript.php, (27) Savant2_Plugin_listalpha.php, (28) Savant2_Plugin_listingname.php, (29) Savant2_Plugin_modify.php, (30) Savant2_Plugin_mtpath.php, (31) Savant2_Plugin_options.php, (32) Savant2_Plugin_radios.php, (33) Savant2_Plugin_rating.php, or (34) Savant2_Plugin_textarea.php.","2006-08-05T00:04:00Z",{"cvss_v2.0":10},{"version":11,"baseScore":12,"accessVector":13,"vectorString":14,"authentication":15,"integrityImpact":16,"accessComplexity":17,"availabilityImpact":16,"confidentialityImpact":16},"2.0",7.5,"NETWORK","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","NONE","PARTIAL","LOW",true,[20],"NVD-CWE-Other",[22],"cpe:2.3:a:phpsavant:savant2:*:*:*:*:*:*:*:*",[24],"Phpsavant Savant2",[26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64],"http:\u002F\u002Fsecurityreason.com\u002Fsecurityalert\u002F1324","http:\u002F\u002Fsecuritytracker.com\u002Fid?1016560","http:\u002F\u002Fwww.osvdb.org\u002F28679","http:\u002F\u002Fwww.osvdb.org\u002F28680","http:\u002F\u002Fwww.osvdb.org\u002F28681","http:\u002F\u002Fwww.osvdb.org\u002F28682","http:\u002F\u002Fwww.osvdb.org\u002F28683","http:\u002F\u002Fwww.osvdb.org\u002F28684","http:\u002F\u002Fwww.osvdb.org\u002F28685","http:\u002F\u002Fwww.osvdb.org\u002F28686","http:\u002F\u002Fwww.osvdb.org\u002F28687","http:\u002F\u002Fwww.osvdb.org\u002F28688","http:\u002F\u002Fwww.osvdb.org\u002F28689","http:\u002F\u002Fwww.osvdb.org\u002F28690","http:\u002F\u002Fwww.osvdb.org\u002F28691","http:\u002F\u002Fwww.osvdb.org\u002F28692","http:\u002F\u002Fwww.osvdb.org\u002F28693","http:\u002F\u002Fwww.osvdb.org\u002F28694","http:\u002F\u002Fwww.osvdb.org\u002F28695","http:\u002F\u002Fwww.osvdb.org\u002F28696","http:\u002F\u002Fwww.osvdb.org\u002F28697","http:\u002F\u002Fwww.osvdb.org\u002F28698","http:\u002F\u002Fwww.osvdb.org\u002F28699","http:\u002F\u002Fwww.osvdb.org\u002F28700","http:\u002F\u002Fwww.osvdb.org\u002F28701","http:\u002F\u002Fwww.osvdb.org\u002F28702","http:\u002F\u002Fwww.osvdb.org\u002F28703","http:\u002F\u002Fwww.osvdb.org\u002F28704","http:\u002F\u002Fwww.osvdb.org\u002F28705","http:\u002F\u002Fwww.osvdb.org\u002F28706","http:\u002F\u002Fwww.osvdb.org\u002F28707","http:\u002F\u002Fwww.osvdb.org\u002F28708","http:\u002F\u002Fwww.osvdb.org\u002F28709","http:\u002F\u002Fwww.osvdb.org\u002F28710","http:\u002F\u002Fwww.osvdb.org\u002F28711","http:\u002F\u002Fwww.osvdb.org\u002F28712","http:\u002F\u002Fwww.securityfocus.com\u002Farchive\u002F1\u002F440835\u002F100\u002F200\u002Fthreaded","http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F19151","https:\u002F\u002Fexchange.xforce.ibmcloud.com\u002Fvulnerabilities\u002F27906",0.73,0.18712,0.97273,false,null,{"timestamp":69,"automatable":71,"tech_impact":72,"exploitation":73,"cisa_decision":74,"cisa_remediation_timeline":75},"no","partial","none",{},"FSU",[77],{"name":78,"source":79,"tactics":80,"technique_id":82},"Exploit Public-Facing Application","attack_vector",[81],"initial-access","T1190",[84,85],{"link":63},{"link":27}]