Unscored severity · published Apr 2, 2006
CVE-2006-1584
Unspecified vulnerability in index.php in Warcraft III Replay Parser for PHP 1.8c allows remote attackers to inject arbitrary web script or HTML via the page parameter, possibly…
–
CVSS
5.8%
EPSS
No
On KEV
Description
Unspecified vulnerability in index.php in Warcraft III Replay Parser for PHP 1.8c allows remote attackers to inject arbitrary web script or HTML via the page parameter, possibly related to fopen function calls or file uploads. NOTE: post-disclosure analysis by CVE suggests that the "page" parameter is not used in this product, and "id" might be the affected parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)5.8% · higher than 93% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WI
Warcraft Iii Replay Parser Php · Juliusz Julas Gonera
1.8c · source: NVD
Affected product
WI
Warcraft Iii Replay Parser Php
Juliusz Julas Gonera
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-1584
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-1584
www.securityfocus.com
http://www.securityfocus.com/archive/1/429535/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/17334
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/25686
More from Warcraft Iii Replay Parser Php
–
CVE-2006-1583
Cross-site scripting (XSS) vulnerability in index.php in Warcraft III Replay Parser for PHP 1.8c allows remote attackers to inject arbitrary web script or HTML via the page…