CVE-2006-5811: Medium severity OpenEMR OpenEMR vulnerability
Published Nov 8, 2006
·Updated
PHP remote file inclusion vulnerability in library/translation.inc.php in OpenEMR 2.8.1, with registerglobals enabled, allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[srcdir] parameter.
Affected Software
1 affected component
OpenEMR OpenEMR=2.8.1
Event History
Nov 8, 2006
CVE Published
11:07 PM
Data Sourced
via NVD·11:07 PM
DescriptionSeverityAffected Software
Nov 9, 2006
CVE Published
via MITRE·04:00 AM
Data Sourced
via MITRE·04:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-5811?
CVE-2006-5811 is considered a critical vulnerability due to its ability to allow remote code execution.
2
How do I fix CVE-2006-5811?
To fix CVE-2006-5811, disable register_globals in your PHP configuration and upgrade to a newer version of OpenEMR that is not vulnerable.
3
What systems are affected by CVE-2006-5811?
CVE-2006-5811 specifically affects OpenEMR version 2.8.1 when register_globals is enabled.
4
What kind of attacks can be executed using CVE-2006-5811?
CVE-2006-5811 allows remote attackers to execute arbitrary PHP code on the server.
5
Is there a patch available for CVE-2006-5811?
There is no dedicated patch for CVE-2006-5811; the recommended mitigation is to upgrade to a secure version of OpenEMR.