CVE-2006-1959

Published: Apr 21, 2006Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

PHP remote file inclusion vulnerability in direct.php in ActualScripts ActualAnalyzer Lite 2.72 and earlier, Gold 7.63 and earlier, and Server 8.23 and earlier allows remote attackers to execute arbitrary code via a URL in the rf parameter.

Affected (3)

Products: Actualscripts: Actualanalyzer

Actualscripts

1 product

Actualanalyzer

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Actualscripts Actualanalyzer	Up to 8.23
Actualscripts Actualanalyzer	Version 2.72
Actualscripts Actualanalyzer	Version 7.63 gold

References (18)

http://secunia.com/advisories/19743

Source: cve@mitre.org

http://securityreason.com/securityalert/742

Source: cve@mitre.org

http://securitytracker.com/id?1015967

Source: cve@mitre.org

http://www.osvdb.org/24778

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/431351/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/434562/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/17597

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/1430

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/25893

Source: cve@mitre.org

http://secunia.com/advisories/19743