CVE-2006-6783
published 2006-12-28CVE-2006-6783: logahead UNU 1.0 before 20061226 allows remote attackers to upload arbitrary files via unspecified vectors related to plugins/widged/_widged.php (aka the…
PriorityP338high7.5CVSS 2.0
AVNACLAuNCPIPAP
EPSS
1.92%
77.4th percentile
logahead UNU 1.0 before 20061226 allows remote attackers to upload arbitrary files via unspecified vectors related to plugins/widged/_widged.php (aka the WidgEd plugin), possibly because of an authentication bypass. NOTE: some of these details are obtained from third party information.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| logahead | logahead_unu | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-wxqx-h8v6-v72p: Unrestricted file upload vulnerability in logahead UNU 1
ghsa_unreviewed·2022-05-01·CVSS 7.5
CVE-2006-6887 [HIGH] CWE-94 GHSA-wxqx-h8v6-v72p: Unrestricted file upload vulnerability in logahead UNU 1
Unrestricted file upload vulnerability in logahead UNU 1.0 allows remote attackers to upload and execute arbitrary PHP code via unspecified vectors related to plugins/widged/_widged.php (aka the WidgEd plugin), a different vulnerability than CVE-2006-6783. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.
GHSA
GHSA-x79m-w5p6-hc65: logahead UNU 1
ghsa_unreviewed·2022-05-01
CVE-2006-6783 [HIGH] CWE-287 GHSA-x79m-w5p6-hc65: logahead UNU 1
logahead UNU 1.0 before 20061226 allows remote attackers to upload arbitrary files via unspecified vectors related to plugins/widged/_widged.php (aka the WidgEd plugin), possibly because of an authentication bypass. NOTE: some of these details are obtained from third party information.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://logahead.com/forums/comments.php?DiscussionID=216http://secunia.com/advisories/23470http://securityreason.com/securityalert/2071http://securitytracker.com/id?1017444http://www.securityfocus.com/archive/1/455307/100/0/threadedhttp://www.securityfocus.com/bid/21743http://www.vupen.com/english/advisories/2006/5184http://logahead.com/forums/comments.php?DiscussionID=216http://secunia.com/advisories/23470http://securityreason.com/securityalert/2071http://securitytracker.com/id?1017444http://www.securityfocus.com/archive/1/455307/100/0/threadedhttp://www.securityfocus.com/bid/21743http://www.vupen.com/english/advisories/2006/5184
2006-12-28
Published