virus logo Intrusion Prevention

Eva.Web.Index.PHP3.File.Inclusion

description-logoDescription

This indicates a vulnerability in EVA-Web. It allows remote attackers to conduct cross-site scripting attacks via invalid "perso" or "aide" parameters .

affected-products-logoAffected Products

SPIP-Education EVA-Web 2.1.2
SPIP-Education EVA-Web 2.2
SPIP-Education EVA-Web 2.1
SPIP-Education EVA-Web 2.0

Impact logoImpact

Cross site scripting.

recomended-action-logoRecommended Actions

Currently we are not aware of any official fix for this issue.

Telemetry logoTelemetry

Coverage

IPS (Regular DB)
IPS (Extended DB)
ID 14873
Created Aug 09, 2007
Updated Aug 29, 2022
Risk black-background-circle-icon black-background-circle-icon black-background-circle-icon black-background-circle-icon lightgray-background-circle-icon
CVE ID CVE-2006-2690
Exploit Prediction Score 0.43%
Default Action pass
Active
Affected OS Windows, Linux, BSD, Solaris, MacOS
Affected App PHP_app