FKIE_CVE-2006-3995

Vulnerability from fkie_nvd - Published: 2006-08-05 00:04 - Updated: 2026-06-16 22:28
Severity
Summary
Multiple PHP remote file inclusion vulnerabilities in (1) uhp_config.php, and possibly (2) footer.php, (3) functions.php, (4) install.uhp.php, (5) toolbar.uhp.html.php, (6) uhp.class.php, and (7) uninstall.uhp.php, in the UHP (User Home Pages) 0.5 component (aka com_uhp) for Mambo or Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.
References
cve@mitre.orghttp://attrition.org/pipermail/vim/2007-March/001457.html
cve@mitre.orghttp://attrition.org/pipermail/vim/2007-March/001458.html
cve@mitre.orghttp://kurdishsecurity.blogspot.com/2006/07/kurdish-security-15-user-home-pges.html
cve@mitre.orghttp://secunia.com/advisories/21305Patch, Vendor Advisory
cve@mitre.orghttp://www.osvdb.org/27651Exploit, Patch
cve@mitre.orghttp://www.osvdb.org/27652
cve@mitre.orghttp://www.osvdb.org/28111
cve@mitre.orghttp://www.osvdb.org/28112
cve@mitre.orghttp://www.osvdb.org/28113
cve@mitre.orghttp://www.ravenswoodit.co.uk/index.php?option=com_docman&task=cat_view&gid=76&Itemid=13Patch
cve@mitre.orghttp://www.securityfocus.com/bid/19233Exploit
cve@mitre.orghttp://www.securityfocus.com/bid/23113
cve@mitre.orghttp://www.vupen.com/english/advisories/2006/3056
cve@mitre.orghttps://exchange.xforce.ibmcloud.com/vulnerabilities/28080
cve@mitre.orghttps://exchange.xforce.ibmcloud.com/vulnerabilities/33178
cve@mitre.orghttps://www.exploit-db.com/exploits/2089
cve@mitre.orghttps://www.exploit-db.com/exploits/3553
af854a3a-2127-422b-91ae-364da2661108http://attrition.org/pipermail/vim/2007-March/001457.html
af854a3a-2127-422b-91ae-364da2661108http://attrition.org/pipermail/vim/2007-March/001458.html
af854a3a-2127-422b-91ae-364da2661108http://kurdishsecurity.blogspot.com/2006/07/kurdish-security-15-user-home-pges.html
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/21305Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://www.osvdb.org/27651Exploit, Patch
af854a3a-2127-422b-91ae-364da2661108http://www.osvdb.org/27652
af854a3a-2127-422b-91ae-364da2661108http://www.osvdb.org/28111
af854a3a-2127-422b-91ae-364da2661108http://www.osvdb.org/28112
af854a3a-2127-422b-91ae-364da2661108http://www.osvdb.org/28113
af854a3a-2127-422b-91ae-364da2661108http://www.ravenswoodit.co.uk/index.php?option=com_docman&task=cat_view&gid=76&Itemid=13Patch
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/19233Exploit
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/23113
af854a3a-2127-422b-91ae-364da2661108http://www.vupen.com/english/advisories/2006/3056
af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/28080
af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/33178
af854a3a-2127-422b-91ae-364da2661108https://www.exploit-db.com/exploits/2089
af854a3a-2127-422b-91ae-364da2661108https://www.exploit-db.com/exploits/3553
Impacted products
Vendor Product Version
user_home_pages user_home_pages 0.5
To clipboard 

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "source": "cve@mitre.org"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:user_home_pages:user_home_pages:0.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "66E5BB4F-1C68-41B2-BB47-1D46D01A32F5",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Multiple PHP remote file inclusion vulnerabilities in (1) uhp_config.php, and possibly (2) footer.php, (3) functions.php, (4) install.uhp.php, (5) toolbar.uhp.html.php, (6) uhp.class.php, and (7) uninstall.uhp.php, in the UHP (User Home Pages) 0.5 component (aka com_uhp) for Mambo or Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter."
    },
    {
      "lang": "es",
      "value": "M\u00faltiples vulnerabilidades PHP de inclusi\u00f3n remota de archivo en (1) uhp_config.php, and possibly (2) footer.php, (3) functions.php, (4) install.uhp.php, (5) toolbar.uhp.html.php, (6) uhp.class.php, y (7) uninstall.uhp.php, en el componente UHP (User Home Pages) 0.5 (tambi\u00e9n conocido como com_uhp) para Mambo o Joomla, permite a atacantes remotos ejecutar c\u00f3digo PHP a trav\u00e9s de una URL en el par\u00e1metro mosConfig_absolute_path."
    }
  ],
  "id": "CVE-2006-3995",
  "lastModified": "2026-06-16T22:28:13.543",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "MEDIUM",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 6.8,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 8.6,
        "impactScore": 6.4,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": true,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2006-08-05T00:04:00.000",
  "references": [
    {
      "source": "cve@mitre.org",
      "url": "http://attrition.org/pipermail/vim/2007-March/001457.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://attrition.org/pipermail/vim/2007-March/001458.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://kurdishsecurity.blogspot.com/2006/07/kurdish-security-15-user-home-pges.html"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/21305"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Exploit",
        "Patch"
      ],
      "url": "http://www.osvdb.org/27651"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.osvdb.org/27652"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.osvdb.org/28111"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.osvdb.org/28112"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.osvdb.org/28113"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch"
      ],
      "url": "http://www.ravenswoodit.co.uk/index.php?option=com_docman\u0026task=cat_view\u0026gid=76\u0026Itemid=13"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Exploit"
      ],
      "url": "http://www.securityfocus.com/bid/19233"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/bid/23113"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.vupen.com/english/advisories/2006/3056"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28080"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/33178"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://www.exploit-db.com/exploits/2089"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://www.exploit-db.com/exploits/3553"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://attrition.org/pipermail/vim/2007-March/001457.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://attrition.org/pipermail/vim/2007-March/001458.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://kurdishsecurity.blogspot.com/2006/07/kurdish-security-15-user-home-pges.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/21305"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit",
        "Patch"
      ],
      "url": "http://www.osvdb.org/27651"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.osvdb.org/27652"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.osvdb.org/28111"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.osvdb.org/28112"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.osvdb.org/28113"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch"
      ],
      "url": "http://www.ravenswoodit.co.uk/index.php?option=com_docman\u0026task=cat_view\u0026gid=76\u0026Itemid=13"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit"
      ],
      "url": "http://www.securityfocus.com/bid/19233"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/23113"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.vupen.com/english/advisories/2006/3056"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28080"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/33178"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://www.exploit-db.com/exploits/2089"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://www.exploit-db.com/exploits/3553"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-94"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.