CVE-2006-4422: High severity Jetbox Jetbox CMS vulnerability
DISPUTED PHP remote file inclusion vulnerability in includes/phpdig/libs/searchfunction.php in Jetbox CMS 2.1 allows remote attackers to execute arbitrary PHP code via a URL in the relativescriptpath parameter, a different vector than CVE-2006-2270. NOTE: this issue has been disputed, and as of 20060830, CVE analysis concurs with the dispute. In addition, it is likely that the vulnerability is actually in a third party module, phpDig 1.8.8.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2006-4422?
The severity of CVE-2006-4422 is considered disputed, with opinions on its impact varying across different sources.
How do I fix CVE-2006-4422?
To mitigate CVE-2006-4422, it is recommended to update Jetbox CMS to a patched version or restrict input from the relative_script_path parameter.
What systems are affected by CVE-2006-4422?
CVE-2006-4422 affects Jetbox CMS version 2.1.
Can CVE-2006-4422 allow for remote code execution?
Yes, CVE-2006-4422 can potentially allow remote attackers to execute arbitrary PHP code through the vulnerable parameter.
Is CVE-2006-4422 the same as CVE-2006-2270?
No, CVE-2006-4422 involves a different vector of attack compared to CVE-2006-2270.