PT-2006-1715 · Runcms · Runcms

Publicado 2006-02-13 · Atualizado 2011-09-08 · CVE-2006-0659

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions RunCMS versions 1.2 and earlier

Description The issue allows remote attackers to execute arbitrary code due to multiple PHP remote file include vulnerabilities. This is possible when register globals and allow url fopen are enabled. The vulnerability can be exploited via the bbPath[path] parameter in files such as class.forumposts.php and forumpollrenderer.php.

Recommendations For RunCMS versions 1.2 and earlier, consider disabling the register globals and allow url fopen settings to mitigate the risk of exploitation. As a temporary workaround, restrict access to the vulnerable files class.forumposts.php and forumpollrenderer.php until a patch is available. Avoid using the bbPath[path] parameter in affected API endpoints until the issue is resolved.

Exploit

Correção

RCE

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2006-0659

Produtos afetados

Runcms

Referências · 8

• 🔥 http://securityfocus.com/archive/1/424708 · Exploit
• 🔥 https://exploit-db.com/exploits/1485 · Exploit
• 🔥 http://retrogod.altervista.org/runcms_13a_xpl.html · Exploit
• 🔥 http://securityfocus.com/bid/16578 · Exploit
• http://secunia.com/advisories/18800 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0659 · Nota
• http://vupen.com/english/advisories/2006/0503 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2006-0659 · Nota de Segurança