CVE-2006-2929: Medium severity openemr openemr vulnerability
Published Jun 9, 2006
·Updated
PHP remote file inclusion vulnerability in contrib/forms/evaluation/CFormEvaluation.class.php in OpenEMR 2.8.1 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[fileroot] parameter.
Affected Software
1 affected component
OpenEMR OpenEMR<=2.8.1
Event History
Jun 9, 2006
CVE Published
10:02 AM
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-2929?
CVE-2006-2929 has a medium severity level due to its potential for remote code execution.
2
How do I fix CVE-2006-2929?
To fix CVE-2006-2929, disable register_globals in PHP configuration and upgrade to OpenEMR version 2.8.2 or later.
3
What software is affected by CVE-2006-2929?
CVE-2006-2929 affects OpenEMR versions 2.8.1 and earlier.
4
What type of attack is possible with CVE-2006-2929?
CVE-2006-2929 allows remote attackers to execute arbitrary PHP code through remote file inclusion.
5
When was CVE-2006-2929 reported?
CVE-2006-2929 was reported in June 2006.