{"id":"CVE-2006-1658","aliases":["EUVD-2006-1659","GHSA-67fw-7399-mm46"],"status":"published","title":"Direct static code injection vulnerability in ticker.db.php in Chucky A. Ivey N.T.  1.1.0 allows...","description":"Direct static code injection vulnerability in ticker.db.php in Chucky A. Ivey N.T.  1.1.0 allows remote administrators to insert arbitrary PHP code into the config file, which is included other N.T. scripts.","severity":{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01548,"percentile":0.75204,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2006-04-07T10:00:00Z","modified":"2026-06-16T22:23:23Z","products":[{"vendor":"chucky_a._ivey","product":"n.t."}],"references":[{"url":"http://evuln.com/vulns/121/summary.html","tags":["x_refsource_MISC","x_transferred"]},{"url":"http://www.vupen.com/english/advisories/2006/1243","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"]},{"url":"http://www.osvdb.org/24398","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"http://www.securityfocus.com/archive/1/431344/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://secunia.com/advisories/19526","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/25639","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://www.securityfocus.com/bid/17387","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2006-1658"},{"url":"https://github.com/advisories/GHSA-67fw-7399-mm46"}],"sources":{"cve":[{"id":"CVE-2006-1658","description":"Direct static code injection vulnerability in ticker.db.php in Chucky A. Ivey N.T.  1.1.0 allows remote administrators to insert arbitrary PHP code into the config file, which is included other N.T. scripts.","status":"published","published":"2006-04-07T10:00:00Z","modified":"2024-08-07T17:19:49.187Z","updated_at":"2026-11-02T14:33:51.835276Z"}],"euvd":[{"id":"EUVD-2006-1659","description":"Direct static code injection vulnerability in ticker.db.php in Chucky A. Ivey N.T.  1.1.0 allows remote administrators to insert arbitrary PHP code into the config file, which is included other N.T. scripts.","status":"published","published":"2006-04-07T10:00:00Z","modified":"2024-08-07T17:19:49Z","updated_at":"2026-11-03T01:16:04.120483Z"}],"ghsa":[{"id":"GHSA-67fw-7399-mm46","title":"Direct static code injection vulnerability in ticker.db.php in Chucky A. Ivey N.T.  1.1.0 allows...","description":"Direct static code injection vulnerability in ticker.db.php in Chucky A. Ivey N.T.  1.1.0 allows remote administrators to insert arbitrary PHP code into the config file, which is included other N.T. scripts.","status":"published","published":"2022-05-01T06:51:35Z","modified":"2023-01-31T05:01:03Z","updated_at":"2026-11-02T14:47:59.049689Z"}],"nvd":[{"id":"CVE-2006-1658","description":"Direct static code injection vulnerability in ticker.db.php in Chucky A. Ivey N.T.  1.1.0 allows remote administrators to insert arbitrary PHP code into the config file, which is included other N.T. scripts.","status":"published","published":"2006-04-07T10:04:00Z","modified":"2026-06-16T22:23:23.237Z","cvss":[{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:01:01.776256Z"}]}}