CVE-2006-0636

desktop.php in eyeOS 0.8.9 and earlier tests for the existence of the _SESSION variable before calling the session_start function, which allows remote…

published February 10, 2006

CVSS
—
EPSS
2%
Percentile
78.9
In the wild
Unconfirmed
What it is

desktop.php in eyeOS 0.8.9 and earlier tests for the existence of the _SESSION variable before calling the session_start function, which allows remote attackers to execute arbitrary PHP code and possibly conduct other attacks by modifying critical assumed-immutable variables, as demonstrated using PHP code in the _SESSION[apps][eyeOptions.eyeapp][wrapup] variable.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01849 · 78.9th percentile
Published
2006-02-10T11:00Z
EPSS history
Timeline
  • 10 FEB 11:00Z
    desktop.php in eyeOS 0.8.9 and earlier tests for the existence of the _SESSION variable before calling the session_start function, which allows remote…
    cvelistv5