PT-2005-3882 · Phpmyfaq · Phpmyfaq

Retrogod · Publicado 2005-09-23 · Atualizado 2016-10-18 · CVE-2005-3048

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions PhpMyFaq version 1.5.1

Description The issue allows remote attackers to read arbitrary files or include arbitrary PHP files via a .. (dot dot) in the LANGCODE parameter. This also enables direct code injection via the User Agent field in a request packet, which can be activated by using LANGCODE to reference the user tracking data file.

Recommendations For PhpMyFaq version 1.5.1, consider restricting access to the LANGCODE parameter to minimize the risk of exploitation. As a temporary workaround, avoid using the LANGCODE parameter in the index.php file until a patch is available. Additionally, restrict the ability to inject code via the User Agent field in request packets.

Exploit

Correção

Identificadores relacionados

CVE-2005-3048

Produtos afetados

Phpmyfaq

Referências · 6

• 🔥 https://exploit-db.com/exploits/1226 · Exploit
• http://osvdb.org/19672 · Nota
• http://rgod.altervista.org/phpmyfuck151.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-3048 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3048 · Nota
• http://marc.info/?l=bugtraq&m=112749230124091&w=2 · Nota