CVE-2006-4423 - CVE House
Back to Database
Status published High CVE-2006-4423

Multiple PHP remote file inclusion vulnerabilities in Bigace 1.8.2 allow...

Vulnerability Description

Multiple PHP remote file inclusion vulnerabilities in Bigace 1.8.2 allow remote attackers to execute arbitrary PHP code via a URL in the (1) GLOBALS[_BIGACE][DIR][admin] parameter in (a) system/command/admin.cmd.php, (b) admin/include/upload_form.php, and (c) admin/include/item_main.php; and the (2) GLOBALS[_BIGACE][DIR][libs] parameter in (d) system/command/admin.cmd.php and (e) system/command/download.cmd.php.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2006-4423

Credits & Attribution

No credits recorded in the NVD database.

References

More from bigace

View All →
CVE-2012-5173
Session fixation vulnerability in BIGACE before 2.7.8 allows remote attackers...
Medium 6.8
CVE-2011-3711
BIGACE 2.7.5 allows remote attackers to obtain sensitive information via...
Medium 5
CVE-2009-3120
Cross-site scripting (XSS) vulnerability in public/index.php in BIGACE Web CMS...
Medium 4.3
CVE-2009-2379
Directory traversal vulnerability in public/index.php in BIGACE Web CMS 2.6...
Medium 6.8
CVE-2009-1778
SQL injection vulnerability in the new user registration feature in...
Medium 6.8

Affected Vendor

Affected Software

bigace
Vulnerable Versions:
1.8.2

Timeline

Official Publish: August 29th, 2006
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.