Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2006-3771 Details

Description

Multiple PHP remote file inclusion vulnerabilities in component.php in iManage CMS 4.0.12 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the absolute_path parameter to (1) articles.php, (2) contact.php, (3) displaypage.php, (4) faq.php, (5) mainbody.php, (6) news.php, (7) registration.php, (8) whosOnline.php, (9) components/com_calendar.php, (10) components/com_forum.php, (11) components/minibb/index.php, (12) components/minibb/bb_admin.php, (13) components/minibb/bb_plugins.php, (14) modules/mod_calendar.php, (15) modules/mod_browser_prefs.php, (16) modules/mod_counter.php, (17) modules/mod_online.php, (18) modules/mod_stats.php, (19) modules/mod_weather.php, (20) themes/bizz.php, (21) themes/default.php, (22) themes/simple.php, (23) themes/original.php, (24) themes/portal.php, (25) themes/purple.php, and other unspecified files.

Metrics

CVSS 3.x Severity and Vector Strings:

No CVSS 3.x data is available for this CVE.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
http://advisories.echo.or.id/adv/adv40-matdhule-2006.txt	CVE	Exploit
http://securityreason.com/securityalert/1265	CVE
http://securitytracker.com/id?1016551	CVE
https://exchange.xforce.ibmcloud.com/vulnerabilities/27875	CVE
https://www.exploit-db.com/exploits/2046	CVE
http://www.osvdb.org/28647	CVE
http://www.osvdb.org/28648	CVE
http://www.osvdb.org/28649	CVE
http://www.osvdb.org/28650	CVE
http://www.osvdb.org/28651	CVE
http://www.osvdb.org/28652	CVE
http://www.osvdb.org/28653	CVE
http://www.osvdb.org/28654	CVE
http://www.osvdb.org/28655	CVE
http://www.osvdb.org/28656	CVE
http://www.osvdb.org/28657	CVE
http://www.osvdb.org/28658	CVE
http://www.osvdb.org/28659	CVE
http://www.osvdb.org/28660	CVE
http://www.osvdb.org/28661	CVE
http://www.osvdb.org/28662	CVE
http://www.osvdb.org/28663	CVE
http://www.osvdb.org/28664	CVE
http://www.osvdb.org/28665	CVE
http://www.osvdb.org/28666	CVE
http://www.osvdb.org/28667	CVE
http://www.osvdb.org/28668	CVE
http://www.osvdb.org/28669	CVE
http://www.osvdb.org/28670	CVE
http://www.osvdb.org/28671	CVE
http://www.securityfocus.com/archive/1/440642/100/0/threaded	CVE
http://www.securityfocus.com/bid/19090	CVE
http://advisories.echo.or.id/adv/adv40-matdhule-2006.txt	[email protected]	Exploit
http://securityreason.com/securityalert/1265	[email protected]
http://securitytracker.com/id?1016551	[email protected]
https://exchange.xforce.ibmcloud.com/vulnerabilities/27875	[email protected]
https://www.exploit-db.com/exploits/2046	[email protected]
http://www.osvdb.org/28647	[email protected]
http://www.osvdb.org/28648	[email protected]
http://www.osvdb.org/28649	[email protected]
http://www.osvdb.org/28650	[email protected]
http://www.osvdb.org/28651	[email protected]
http://www.osvdb.org/28652	[email protected]
http://www.osvdb.org/28653	[email protected]
http://www.osvdb.org/28654	[email protected]
http://www.osvdb.org/28655	[email protected]
http://www.osvdb.org/28656	[email protected]
http://www.osvdb.org/28657	[email protected]
http://www.osvdb.org/28658	[email protected]
http://www.osvdb.org/28659	[email protected]
http://www.osvdb.org/28660	[email protected]
http://www.osvdb.org/28661	[email protected]
http://www.osvdb.org/28662	[email protected]
http://www.osvdb.org/28663	[email protected]
http://www.osvdb.org/28664	[email protected]
http://www.osvdb.org/28665	[email protected]
http://www.osvdb.org/28666	[email protected]
http://www.osvdb.org/28667	[email protected]
http://www.osvdb.org/28668	[email protected]
http://www.osvdb.org/28669	[email protected]
http://www.osvdb.org/28670	[email protected]
http://www.osvdb.org/28671	[email protected]
http://www.securityfocus.com/archive/1/440642/100/0/threaded	[email protected]
http://www.securityfocus.com/bid/19090	[email protected]

see all 64 references

Weakness Enumeration

CWE-ID	CWE Name	Source
NVD-CWE-Other	Weakness Not in a Standard CWE Category	[email protected]

Affected Products

Product	Versions
imaginex-resource imanage cms	<= 4.0.12
CPE cpe:2.3:a:imaginex-resource:imanage_cms:::::::: Remediation No remediation found in references.

Change History

8 change records found show changes

Date	Action	Recorded By
Jun 16, 2026	CVE Modified	[email protected]
Apr 16, 2026		[email protected]
Nov 21, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
Oct 17, 2018	CVE Modified	[email protected]
Oct 19, 2017	CVE Modified	[email protected]
Jul 20, 2017	CVE Modified	[email protected]
Jul 24, 2006	Initial Analysis	[email protected]