PT-2006-2583 · Blizzard · Warcraft Iii Replay Parser For Php

Publicado 2006-04-02 · Atualizado 2018-10-18 · CVE-2006-1584

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions: Warcraft III Replay Parser for PHP version 1.8c

Description: The issue allows remote attackers to inject arbitrary web script or HTML, possibly related to fopen function calls or file uploads. The page parameter might not be used in this product, and the id parameter could be the affected one.

Recommendations: For version 1.8c, consider restricting access to the id parameter in the affected API endpoint until a patch is available. Avoid using the id parameter in the affected endpoint to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2006-1584

Produtos afetados

Warcraft Iii Replay Parser For Php

Referências · 5

• 🔥 https://exploit-db.com/exploits/27537 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25686 · Nota
• http://securityfocus.com/archive/1/429535/100/0/threaded · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-1584 · Nota de Segurança
• http://securityfocus.com/bid/17334 · Nota