GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

CVE-2006-5220 (GCVE-0-2006-5220)

Vulnerability from cvelistv5 – Published: 2006-10-09 22:00 – Updated: 2024-08-07 19:41
VLAI
Summary
Multiple PHP remote file inclusion vulnerabilities in WebYep 1.1.9, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via the webyep_sIncludePath in (1) files in the programm/lib/ directory including (a) WYApplication.php, (b) WYDocument.php, (c) WYEditor.php, (d) WYElement.php, (e) WYFile.php, (f) WYHTMLTag.php, (g) WYImage.php, (h) WYLanguage.php, (i) WYLink.php, (j) WYPath.php, (k) WYPopupWindowLink.php, (l) WYSelectMenu.php, and (m) WYTextArea.php; (2) files in the programm/elements/ directory including (n) WYGalleryElement.php, (o) WYGuestbookElement.php, (p) WYImageElement.php, (q) WYLogonButtonElement.php, (r) WYLongTextElement.php, (s) WYLoopElement.php, (t) WYMenuElement.php, and (u) WYShortTextElement.php; and (3) programm/webyep.php.
Severity
No CVSS data available.
CWE
  • n/a
Assigner
References
URL Tags
http://securityreason.com/securityalert/1702 third-party-advisoryx_refsource_SREASON
https://www.exploit-db.com/exploits/2496 exploitx_refsource_EXPLOIT-DB
http://www.osvdb.org/29654 vdb-entryx_refsource_OSVDB
http://www.osvdb.org/29648 vdb-entryx_refsource_OSVDB
http://www.osvdb.org/29660 vdb-entryx_refsource_OSVDB
http://advisories.echo.or.id/adv/adv48-theday-2006.txt x_refsource_MISC
http://www.osvdb.org/29645 vdb-entryx_refsource_OSVDB
http://www.securityfocus.com/bid/20406 vdb-entryx_refsource_BID
http://www.osvdb.org/29644 vdb-entryx_refsource_OSVDB
http://www.securityfocus.com/archive/1/448009/100… mailing-listx_refsource_BUGTRAQ
http://www.osvdb.org/29649 vdb-entryx_refsource_OSVDB
http://www.osvdb.org/29656 vdb-entryx_refsource_OSVDB
http://www.osvdb.org/29659 vdb-entryx_refsource_OSVDB
http://www.vupen.com/english/advisories/2006/3972 vdb-entryx_refsource_VUPEN
http://www.osvdb.org/29652 vdb-entryx_refsource_OSVDB
http://www.osvdb.org/29650 vdb-entryx_refsource_OSVDB
https://exchange.xforce.ibmcloud.com/vulnerabilit… vdb-entryx_refsource_XF
http://secunia.com/advisories/22336 third-party-advisoryx_refsource_SECUNIA
http://www.obdev.at/products/webyep/release-notes.html x_refsource_CONFIRM
http://www.osvdb.org/29658 vdb-entryx_refsource_OSVDB
http://securitytracker.com/id?1017023 vdb-entryx_refsource_SECTRACK
http://www.osvdb.org/29653 vdb-entryx_refsource_OSVDB
http://www.osvdb.org/29657 vdb-entryx_refsource_OSVDB
http://www.osvdb.org/29662 vdb-entryx_refsource_OSVDB
http://www.osvdb.org/29663 vdb-entryx_refsource_OSVDB
http://www.osvdb.org/29661 vdb-entryx_refsource_OSVDB
http://www.osvdb.org/29647 vdb-entryx_refsource_OSVDB
http://www.osvdb.org/29646 vdb-entryx_refsource_OSVDB
http://www.osvdb.org/29643 vdb-entryx_refsource_OSVDB
http://www.osvdb.org/29651 vdb-entryx_refsource_OSVDB
http://www.osvdb.org/29655 vdb-entryx_refsource_OSVDB
Date Public
2006-10-09 00:00
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T19:41:05.134Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "1702",
            "tags": [
              "third-party-advisory",
              "x_refsource_SREASON",
              "x_transferred"
            ],
            "url": "http://securityreason.com/securityalert/1702"
          },
          {
            "name": "2496",
            "tags": [
              "exploit",
              "x_refsource_EXPLOIT-DB",
              "x_transferred"
            ],
            "url": "https://www.exploit-db.com/exploits/2496"
          },
          {
            "name": "29654",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://www.osvdb.org/29654"
          },
          {
            "name": "29648",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://www.osvdb.org/29648"
          },
          {
            "name": "29660",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://www.osvdb.org/29660"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://advisories.echo.or.id/adv/adv48-theday-2006.txt"
          },
          {
            "name": "29645",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://www.osvdb.org/29645"
          },
          {
            "name": "20406",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/20406"
          },
          {
            "name": "29644",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://www.osvdb.org/29644"
          },
          {
            "name": "20061009 [ECHO_ADV_48$2006] WebYep \u003c= 1.1.9 (webyep_sIncludePath) Multiple Remote File Inclusion Vulnerability",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/448009/100/0/threaded"
          },
          {
            "name": "29649",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://www.osvdb.org/29649"
          },
          {
            "name": "29656",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://www.osvdb.org/29656"
          },
          {
            "name": "29659",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://www.osvdb.org/29659"
          },
          {
            "name": "ADV-2006-3972",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2006/3972"
          },
          {
            "name": "29652",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://www.osvdb.org/29652"
          },
          {
            "name": "29650",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://www.osvdb.org/29650"
          },
          {
            "name": "webyep-webyep-file-include(29397)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/29397"
          },
          {
            "name": "22336",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/22336"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.obdev.at/products/webyep/release-notes.html"
          },
          {
            "name": "29658",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://www.osvdb.org/29658"
          },
          {
            "name": "1017023",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1017023"
          },
          {
            "name": "29653",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://www.osvdb.org/29653"
          },
          {
            "name": "29657",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://www.osvdb.org/29657"
          },
          {
            "name": "29662",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://www.osvdb.org/29662"
          },
          {
            "name": "29663",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://www.osvdb.org/29663"
          },
          {
            "name": "29661",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://www.osvdb.org/29661"
          },
          {
            "name": "29647",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://www.osvdb.org/29647"
          },
          {
            "name": "29646",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://www.osvdb.org/29646"
          },
          {
            "name": "29643",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://www.osvdb.org/29643"
          },
          {
            "name": "29651",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://www.osvdb.org/29651"
          },
          {
            "name": "29655",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://www.osvdb.org/29655"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2006-10-09T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple PHP remote file inclusion vulnerabilities in WebYep 1.1.9, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via the webyep_sIncludePath in (1) files in the programm/lib/ directory including (a) WYApplication.php, (b) WYDocument.php, (c) WYEditor.php, (d) WYElement.php, (e) WYFile.php, (f) WYHTMLTag.php, (g) WYImage.php, (h) WYLanguage.php, (i) WYLink.php, (j) WYPath.php, (k) WYPopupWindowLink.php, (l) WYSelectMenu.php, and (m) WYTextArea.php; (2) files in the programm/elements/ directory including (n) WYGalleryElement.php, (o) WYGuestbookElement.php, (p) WYImageElement.php, (q) WYLogonButtonElement.php, (r) WYLongTextElement.php, (s) WYLoopElement.php, (t) WYMenuElement.php, and (u) WYShortTextElement.php; and (3) programm/webyep.php."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-17T20:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "1702",
          "tags": [
            "third-party-advisory",
            "x_refsource_SREASON"
          ],
          "url": "http://securityreason.com/securityalert/1702"
        },
        {
          "name": "2496",
          "tags": [
            "exploit",
            "x_refsource_EXPLOIT-DB"
          ],
          "url": "https://www.exploit-db.com/exploits/2496"
        },
        {
          "name": "29654",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://www.osvdb.org/29654"
        },
        {
          "name": "29648",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://www.osvdb.org/29648"
        },
        {
          "name": "29660",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://www.osvdb.org/29660"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://advisories.echo.or.id/adv/adv48-theday-2006.txt"
        },
        {
          "name": "29645",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://www.osvdb.org/29645"
        },
        {
          "name": "20406",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/20406"
        },
        {
          "name": "29644",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://www.osvdb.org/29644"
        },
        {
          "name": "20061009 [ECHO_ADV_48$2006] WebYep \u003c= 1.1.9 (webyep_sIncludePath) Multiple Remote File Inclusion Vulnerability",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/448009/100/0/threaded"
        },
        {
          "name": "29649",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://www.osvdb.org/29649"
        },
        {
          "name": "29656",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://www.osvdb.org/29656"
        },
        {
          "name": "29659",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://www.osvdb.org/29659"
        },
        {
          "name": "ADV-2006-3972",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2006/3972"
        },
        {
          "name": "29652",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://www.osvdb.org/29652"
        },
        {
          "name": "29650",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://www.osvdb.org/29650"
        },
        {
          "name": "webyep-webyep-file-include(29397)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/29397"
        },
        {
          "name": "22336",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/22336"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.obdev.at/products/webyep/release-notes.html"
        },
        {
          "name": "29658",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://www.osvdb.org/29658"
        },
        {
          "name": "1017023",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1017023"
        },
        {
          "name": "29653",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://www.osvdb.org/29653"
        },
        {
          "name": "29657",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://www.osvdb.org/29657"
        },
        {
          "name": "29662",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://www.osvdb.org/29662"
        },
        {
          "name": "29663",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://www.osvdb.org/29663"
        },
        {
          "name": "29661",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://www.osvdb.org/29661"
        },
        {
          "name": "29647",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://www.osvdb.org/29647"
        },
        {
          "name": "29646",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://www.osvdb.org/29646"
        },
        {
          "name": "29643",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://www.osvdb.org/29643"
        },
        {
          "name": "29651",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://www.osvdb.org/29651"
        },
        {
          "name": "29655",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://www.osvdb.org/29655"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2006-5220",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Multiple PHP remote file inclusion vulnerabilities in WebYep 1.1.9, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via the webyep_sIncludePath in (1) files in the programm/lib/ directory including (a) WYApplication.php, (b) WYDocument.php, (c) WYEditor.php, (d) WYElement.php, (e) WYFile.php, (f) WYHTMLTag.php, (g) WYImage.php, (h) WYLanguage.php, (i) WYLink.php, (j) WYPath.php, (k) WYPopupWindowLink.php, (l) WYSelectMenu.php, and (m) WYTextArea.php; (2) files in the programm/elements/ directory including (n) WYGalleryElement.php, (o) WYGuestbookElement.php, (p) WYImageElement.php, (q) WYLogonButtonElement.php, (r) WYLongTextElement.php, (s) WYLoopElement.php, (t) WYMenuElement.php, and (u) WYShortTextElement.php; and (3) programm/webyep.php."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "1702",
              "refsource": "SREASON",
              "url": "http://securityreason.com/securityalert/1702"
            },
            {
              "name": "2496",
              "refsource": "EXPLOIT-DB",
              "url": "https://www.exploit-db.com/exploits/2496"
            },
            {
              "name": "29654",
              "refsource": "OSVDB",
              "url": "http://www.osvdb.org/29654"
            },
            {
              "name": "29648",
              "refsource": "OSVDB",
              "url": "http://www.osvdb.org/29648"
            },
            {
              "name": "29660",
              "refsource": "OSVDB",
              "url": "http://www.osvdb.org/29660"
            },
            {
              "name": "http://advisories.echo.or.id/adv/adv48-theday-2006.txt",
              "refsource": "MISC",
              "url": "http://advisories.echo.or.id/adv/adv48-theday-2006.txt"
            },
            {
              "name": "29645",
              "refsource": "OSVDB",
              "url": "http://www.osvdb.org/29645"
            },
            {
              "name": "20406",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/20406"
            },
            {
              "name": "29644",
              "refsource": "OSVDB",
              "url": "http://www.osvdb.org/29644"
            },
            {
              "name": "20061009 [ECHO_ADV_48$2006] WebYep \u003c= 1.1.9 (webyep_sIncludePath) Multiple Remote File Inclusion Vulnerability",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/448009/100/0/threaded"
            },
            {
              "name": "29649",
              "refsource": "OSVDB",
              "url": "http://www.osvdb.org/29649"
            },
            {
              "name": "29656",
              "refsource": "OSVDB",
              "url": "http://www.osvdb.org/29656"
            },
            {
              "name": "29659",
              "refsource": "OSVDB",
              "url": "http://www.osvdb.org/29659"
            },
            {
              "name": "ADV-2006-3972",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2006/3972"
            },
            {
              "name": "29652",
              "refsource": "OSVDB",
              "url": "http://www.osvdb.org/29652"
            },
            {
              "name": "29650",
              "refsource": "OSVDB",
              "url": "http://www.osvdb.org/29650"
            },
            {
              "name": "webyep-webyep-file-include(29397)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/29397"
            },
            {
              "name": "22336",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/22336"
            },
            {
              "name": "http://www.obdev.at/products/webyep/release-notes.html",
              "refsource": "CONFIRM",
              "url": "http://www.obdev.at/products/webyep/release-notes.html"
            },
            {
              "name": "29658",
              "refsource": "OSVDB",
              "url": "http://www.osvdb.org/29658"
            },
            {
              "name": "1017023",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1017023"
            },
            {
              "name": "29653",
              "refsource": "OSVDB",
              "url": "http://www.osvdb.org/29653"
            },
            {
              "name": "29657",
              "refsource": "OSVDB",
              "url": "http://www.osvdb.org/29657"
            },
            {
              "name": "29662",
              "refsource": "OSVDB",
              "url": "http://www.osvdb.org/29662"
            },
            {
              "name": "29663",
              "refsource": "OSVDB",
              "url": "http://www.osvdb.org/29663"
            },
            {
              "name": "29661",
              "refsource": "OSVDB",
              "url": "http://www.osvdb.org/29661"
            },
            {
              "name": "29647",
              "refsource": "OSVDB",
              "url": "http://www.osvdb.org/29647"
            },
            {
              "name": "29646",
              "refsource": "OSVDB",
              "url": "http://www.osvdb.org/29646"
            },
            {
              "name": "29643",
              "refsource": "OSVDB",
              "url": "http://www.osvdb.org/29643"
            },
            {
              "name": "29651",
              "refsource": "OSVDB",
              "url": "http://www.osvdb.org/29651"
            },
            {
              "name": "29655",
              "refsource": "OSVDB",
              "url": "http://www.osvdb.org/29655"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2006-5220",
    "datePublished": "2006-10-09T22:00:00.000Z",
    "dateReserved": "2006-10-09T00:00:00.000Z",
    "dateUpdated": "2024-08-07T19:41:05.134Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2006-5220",
      "date": "2026-09-17",
      "epss": "0.14581",
      "percentile": "0.96475"
    },
    "fkie_nvd": {
      "configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:objective_development:webyep:1.1.9:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"0BD42EBF-A680-4018-ADC2-A9F60A6A95E6\"}]}]}]",
      "descriptions": "[{\"lang\": \"en\", \"value\": \"Multiple PHP remote file inclusion vulnerabilities in WebYep 1.1.9, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via the webyep_sIncludePath in (1) files in the programm/lib/ directory including (a) WYApplication.php, (b) WYDocument.php, (c) WYEditor.php, (d) WYElement.php, (e) WYFile.php, (f) WYHTMLTag.php, (g) WYImage.php, (h) WYLanguage.php, (i) WYLink.php, (j) WYPath.php, (k) WYPopupWindowLink.php, (l) WYSelectMenu.php, and (m) WYTextArea.php; (2) files in the programm/elements/ directory including (n) WYGalleryElement.php, (o) WYGuestbookElement.php, (p) WYImageElement.php, (q) WYLogonButtonElement.php, (r) WYLongTextElement.php, (s) WYLoopElement.php, (t) WYMenuElement.php, and (u) WYShortTextElement.php; and (3) programm/webyep.php.\"}, {\"lang\": \"es\", \"value\": \"M\\u00faltiples vulnerabilidades PHP de inclusi\\u00f3n remota de archivos en WebYep 1.1.9, cuando register_globals est\\u00e1 habilitado, permite a un atacante remoto ejecutar c\\u00f3digo PHP de su elecci\\u00f3n a trav\\u00e9s de webyep_sIncludePath en (1) archivos en el directorio programm/lib/ incluyendo (a) WYApplication.php, (b) WYDocument.php, (c) WYEditor.php, (d) WYElement.php, (e) WYFile.php, (f) WYHTMLTag.php, (g) WYImage.php, (h) WYLanguage.php, (i) WYLink.php, (j) WYPath.php, (k) WYPopupWindowLink.php, (l) WYSelectMenu.php, y (m) WYTextArea.php; (2) archivos en el directorio programm/elements/ incluyendo (n) WYGalleryElement.php, (o) WYGuestbookElement.php, (p) WYImageElement.php, (q) WYLogonButtonElement.php, (r) WYLongTextElement.php, (s) WYLoopElement.php, (t) WYMenuElement.php, y (u) WYShortTextElement.php; y (3) programm/webyeb.php.\"}]",
      "id": "CVE-2006-5220",
      "lastModified": "2024-11-21T00:18:21.420",
      "metrics": "{\"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:N/AC:H/Au:N/C:P/I:P/A:P\", \"baseScore\": 5.1, \"accessVector\": \"NETWORK\", \"accessComplexity\": \"HIGH\", \"authentication\": \"NONE\", \"confidentialityImpact\": \"PARTIAL\", \"integrityImpact\": \"PARTIAL\", \"availabilityImpact\": \"PARTIAL\"}, \"baseSeverity\": \"MEDIUM\", \"exploitabilityScore\": 4.9, \"impactScore\": 6.4, \"acInsufInfo\": false, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": true, \"userInteractionRequired\": false}]}",
      "published": "2006-10-10T04:06:00.000",
      "references": "[{\"url\": \"http://advisories.echo.or.id/adv/adv48-theday-2006.txt\", \"source\": \"cve@mitre.org\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://secunia.com/advisories/22336\", \"source\": \"cve@mitre.org\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://securityreason.com/securityalert/1702\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://securitytracker.com/id?1017023\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.obdev.at/products/webyep/release-notes.html\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.osvdb.org/29643\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.osvdb.org/29644\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.osvdb.org/29645\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.osvdb.org/29646\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.osvdb.org/29647\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.osvdb.org/29648\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.osvdb.org/29649\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.osvdb.org/29650\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.osvdb.org/29651\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.osvdb.org/29652\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.osvdb.org/29653\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.osvdb.org/29654\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.osvdb.org/29655\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.osvdb.org/29656\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.osvdb.org/29657\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.osvdb.org/29658\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.osvdb.org/29659\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.osvdb.org/29660\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.osvdb.org/29661\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.osvdb.org/29662\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.osvdb.org/29663\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.securityfocus.com/archive/1/448009/100/0/threaded\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.securityfocus.com/bid/20406\", \"source\": \"cve@mitre.org\", \"tags\": [\"Exploit\"]}, {\"url\": \"http://www.vupen.com/english/advisories/2006/3972\", \"source\": \"cve@mitre.org\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://exchange.xforce.ibmcloud.com/vulnerabilities/29397\", \"source\": \"cve@mitre.org\"}, {\"url\": \"https://www.exploit-db.com/exploits/2496\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://advisories.echo.or.id/adv/adv48-theday-2006.txt\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://secunia.com/advisories/22336\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://securityreason.com/securityalert/1702\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://securitytracker.com/id?1017023\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.obdev.at/products/webyep/release-notes.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.osvdb.org/29643\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.osvdb.org/29644\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.osvdb.org/29645\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.osvdb.org/29646\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.osvdb.org/29647\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.osvdb.org/29648\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.osvdb.org/29649\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.osvdb.org/29650\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.osvdb.org/29651\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.osvdb.org/29652\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.osvdb.org/29653\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.osvdb.org/29654\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.osvdb.org/29655\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.osvdb.org/29656\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.osvdb.org/29657\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.osvdb.org/29658\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.osvdb.org/29659\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.osvdb.org/29660\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.osvdb.org/29661\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.osvdb.org/29662\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.osvdb.org/29663\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.securityfocus.com/archive/1/448009/100/0/threaded\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.securityfocus.com/bid/20406\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Exploit\"]}, {\"url\": \"http://www.vupen.com/english/advisories/2006/3972\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://exchange.xforce.ibmcloud.com/vulnerabilities/29397\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://www.exploit-db.com/exploits/2496\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}]",
      "sourceIdentifier": "cve@mitre.org",
      "vulnStatus": "Modified",
      "weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-94\"}]}]"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2006-5220\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2006-10-10T04:06:00.000\",\"lastModified\":\"2026-04-23T00:35:47.467\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Multiple PHP remote file inclusion vulnerabilities in WebYep 1.1.9, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via the webyep_sIncludePath in (1) files in the programm/lib/ directory including (a) WYApplication.php, (b) WYDocument.php, (c) WYEditor.php, (d) WYElement.php, (e) WYFile.php, (f) WYHTMLTag.php, (g) WYImage.php, (h) WYLanguage.php, (i) WYLink.php, (j) WYPath.php, (k) WYPopupWindowLink.php, (l) WYSelectMenu.php, and (m) WYTextArea.php; (2) files in the programm/elements/ directory including (n) WYGalleryElement.php, (o) WYGuestbookElement.php, (p) WYImageElement.php, (q) WYLogonButtonElement.php, (r) WYLongTextElement.php, (s) WYLoopElement.php, (t) WYMenuElement.php, and (u) WYShortTextElement.php; and (3) programm/webyep.php.\"},{\"lang\":\"es\",\"value\":\"M\u00faltiples vulnerabilidades PHP de inclusi\u00f3n remota de archivos en WebYep 1.1.9, cuando register_globals est\u00e1 habilitado, permite a un atacante remoto ejecutar c\u00f3digo PHP de su elecci\u00f3n a trav\u00e9s de webyep_sIncludePath en (1) archivos en el directorio programm/lib/ incluyendo (a) WYApplication.php, (b) WYDocument.php, (c) WYEditor.php, (d) WYElement.php, (e) WYFile.php, (f) WYHTMLTag.php, (g) WYImage.php, (h) WYLanguage.php, (i) WYLink.php, (j) WYPath.php, (k) WYPopupWindowLink.php, (l) WYSelectMenu.php, y (m) WYTextArea.php; (2) archivos en el directorio programm/elements/ incluyendo (n) WYGalleryElement.php, (o) WYGuestbookElement.php, (p) WYImageElement.php, (q) WYLogonButtonElement.php, (r) WYLongTextElement.php, (s) WYLoopElement.php, (t) WYMenuElement.php, y (u) WYShortTextElement.php; y (3) programm/webyeb.php.\"}],\"metrics\":{\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:H/Au:N/C:P/I:P/A:P\",\"baseScore\":5.1,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"HIGH\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"PARTIAL\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":4.9,\"impactScore\":6.4,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":true,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-94\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:objective_development:webyep:1.1.9:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0BD42EBF-A680-4018-ADC2-A9F60A6A95E6\"}]}]}],\"references\":[{\"url\":\"http://advisories.echo.or.id/adv/adv48-theday-2006.txt\",\"source\":\"cve@mitre.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/22336\",\"source\":\"cve@mitre.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://securityreason.com/securityalert/1702\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://securitytracker.com/id?1017023\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.obdev.at/products/webyep/release-notes.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.osvdb.org/29643\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.osvdb.org/29644\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.osvdb.org/29645\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.osvdb.org/29646\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.osvdb.org/29647\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.osvdb.org/29648\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.osvdb.org/29649\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.osvdb.org/29650\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.osvdb.org/29651\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.osvdb.org/29652\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.osvdb.org/29653\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.osvdb.org/29654\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.osvdb.org/29655\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.osvdb.org/29656\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.osvdb.org/29657\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.osvdb.org/29658\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.osvdb.org/29659\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.osvdb.org/29660\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.osvdb.org/29661\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.osvdb.org/29662\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.osvdb.org/29663\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.securityfocus.com/archive/1/448009/100/0/threaded\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.securityfocus.com/bid/20406\",\"source\":\"cve@mitre.org\",\"tags\":[\"Exploit\"]},{\"url\":\"http://www.vupen.com/english/advisories/2006/3972\",\"source\":\"cve@mitre.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://exchange.xforce.ibmcloud.com/vulnerabilities/29397\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://www.exploit-db.com/exploits/2496\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://advisories.echo.or.id/adv/adv48-theday-2006.txt\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/22336\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://securityreason.com/securityalert/1702\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://securitytracker.com/id?1017023\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.obdev.at/products/webyep/release-notes.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.osvdb.org/29643\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.osvdb.org/29644\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.osvdb.org/29645\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.osvdb.org/29646\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.osvdb.org/29647\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.osvdb.org/29648\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.osvdb.org/29649\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.osvdb.org/29650\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.osvdb.org/29651\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.osvdb.org/29652\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.osvdb.org/29653\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.osvdb.org/29654\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.osvdb.org/29655\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.osvdb.org/29656\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.osvdb.org/29657\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.osvdb.org/29658\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.osvdb.org/29659\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.osvdb.org/29660\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.osvdb.org/29661\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.osvdb.org/29662\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.osvdb.org/29663\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securityfocus.com/archive/1/448009/100/0/threaded\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securityfocus.com/bid/20406\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Exploit\"]},{\"url\":\"http://www.vupen.com/english/advisories/2006/3972\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://exchange.xforce.ibmcloud.com/vulnerabilities/29397\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://www.exploit-db.com/exploits/2496\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}"
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.