PT-2006-1804 · Dotproject · Dotproject

CVE-2006-0755 · Publicado 2006-02-18 · Atualizado 2025-01-16

Positive Technologies (AI Summary)

CVSS v3.1

5.6

Média

Vetor base

AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions dotProject versions 2.0.1 and earlier

Description The issue allows remote attackers to execute arbitrary commands via the baseDir parameter in several PHP files, including db adodb.php, db connect.php, session.php, vw usr roles.php, calendar.php, date format.php, and tasks/gantt.php, and the dPconfig[root dir] parameter in projects/gantt.php, gantt2.php, and vw files.php, when register globals is enabled. The vendor disputes this issue, stating that the product documentation clearly recommends disabling register globals and that the check.php script warns against this setting.

Recommendations For dotProject versions 2.0.1 and earlier, consider disabling the register globals setting to mitigate the risk of exploitation. As a temporary workaround, restrict access to the vulnerable parameters baseDir and dPconfig[root dir] in the affected PHP files until a fix is available.

Exploit

Correção

Identificadores relacionados

CVE-2006-0755

Produtos afetados

Dotproject

Referências · 29

• 🔥 https://exploit-db.com/exploits/27218 · Exploit
• 🔥 https://exploit-db.com/exploits/27223 · Exploit
• 🔥 https://exploit-db.com/exploits/27224 · Exploit
• 🔥 https://exploit-db.com/exploits/27222 · Exploit
• 🔥 https://exploit-db.com/exploits/27220 · Exploit
• 🔥 https://exploit-db.com/exploits/27219 · Exploit
• 🔥 http://securityfocus.com/bid/16648 · Exploit
• 🔥 https://exploit-db.com/exploits/27225 · Exploit
• 🔥 https://exploit-db.com/exploits/27221 · Exploit
• 🔥 https://exploit-db.com/exploits/27217 · Exploit
• 🔥 https://exploit-db.com/exploits/22708 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24738 · Nota
• http://osvdb.org/23210 · Nota
• http://osvdb.org/23209 · Nota
• http://osvdb.org/23219 · Nota