[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cve-CVE-2006-4159":3},{"id":4,"cve_id":5,"euvd_id":6,"summary":7,"published":8,"cvss_data":9,"is_remote":18,"cwes":19,"cpes":21,"technologies":23,"references":25,"score":37,"epss_score":38,"epss_percentile":39,"is_kev":40,"cisa_kev_date_added":41,"cisa_kev_due_date":41,"cisa_ssvc":42,"attack_mappings":48,"exploits":76},121056,"CVE-2006-4159","EUVD-2006-4149","Multiple PHP remote file inclusion vulnerabilities in Chaussette 080706 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the _BASE parameter to scripts in Classes\u002F including (1) Evenement.php, (2) Event.php, (3) Event_for_month.php, (4) Event_for_week.php, (5) My_Log.php, (6) My_Smarty.php, and possibly (7) Event_for_month_per_day.php.","2006-08-16T22:04:00Z",{"cvss_v2.0":10},{"version":11,"baseScore":12,"accessVector":13,"vectorString":14,"authentication":15,"integrityImpact":16,"accessComplexity":17,"availabilityImpact":16,"confidentialityImpact":16},"2.0",7.5,"NETWORK","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","NONE","PARTIAL","LOW",true,[20],"CWE-94",[22],"cpe:2.3:a:chaussette:chaussette:*:*:*:*:*:*:*:*",[24],"Chaussette Chaussette",[26,27,28,29,30,31,32,33,34,35,36],"http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F21489","http:\u002F\u002Fwww.osvdb.org\u002F27897","http:\u002F\u002Fwww.osvdb.org\u002F27898","http:\u002F\u002Fwww.osvdb.org\u002F27899","http:\u002F\u002Fwww.osvdb.org\u002F27900","http:\u002F\u002Fwww.osvdb.org\u002F27901","http:\u002F\u002Fwww.osvdb.org\u002F27902","http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F19480","http:\u002F\u002Fwww.vupen.com\u002Fenglish\u002Fadvisories\u002F2006\u002F3269","https:\u002F\u002Fexchange.xforce.ibmcloud.com\u002Fvulnerabilities\u002F28327","https:\u002F\u002Fwww.exploit-db.com\u002Fexploits\u002F2169",0.73,0.14966,0.96687,false,null,{"timestamp":41,"automatable":43,"tech_impact":44,"exploitation":45,"cisa_decision":46,"cisa_remediation_timeline":47},"no","partial","none",{},"FSU",[49,55,64,70],{"name":50,"source":51,"tactics":52,"technique_id":54},"Exploit Public-Facing Application","attack_vector",[53],"initial-access","T1190",{"name":56,"source":57,"cwe_ids":58,"tactics":59,"capec_ids":61,"technique_id":63},"HTML Smuggling","capec",[20],[60],"stealth",[62],"CAPEC-35","T1027.006",{"name":65,"source":57,"cwe_ids":66,"tactics":67,"capec_ids":68,"technique_id":69},"Embedded Payloads",[20],[60],[62],"T1027.009",{"name":71,"source":57,"cwe_ids":72,"tactics":73,"capec_ids":74,"technique_id":75},"Resource Forking",[20],[60],[62],"T1564.009",[77,78,79],{"link":26},{"link":33},{"link":36}]