CVE-2006-3584

Published: Aug 8, 2006Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Dynamic variable evaluation vulnerability in index.php in Jetbox CMS 2.1 SR1 allows remote attackers to overwrite configuration variables via URL parameters, which are evaluated as PHP variable variables.

Affected (2)

Products: Jetbox: Jetbox Cms

1 product

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Jetbox Jetbox Cms	Version 2.1
Jetbox Jetbox Cms	Version 2.1_sr1

References (10)

http://secunia.com/advisories/20889

Source: PSIRT-CNA@flexerasoftware.com

Vendor Advisory

http://secunia.com/secunia_research/2006-57/advisory/

Source: PSIRT-CNA@flexerasoftware.com

Vendor Advisory

http://securityreason.com/securityalert/1339

Source: PSIRT-CNA@flexerasoftware.com

http://www.securityfocus.com/archive/1/441980/100/0/threaded

Source: PSIRT-CNA@flexerasoftware.com

http://www.securityfocus.com/bid/19303

Source: PSIRT-CNA@flexerasoftware.com

http://secunia.com/advisories/20889

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/secunia_research/2006-57/advisory/

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://securityreason.com/securityalert/1339

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/441980/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/19303

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.