PT-2006-2819 · Php · Php121

Rgod · Publicado 2006-04-19 · Atualizado 2017-10-19 · CVE-2006-1828

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Média

Vetor base

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions PHP121 version 1.4

Description The issue allows remote attackers to execute arbitrary SQL commands and potentially execute arbitrary code. This is achieved via the sess username variable, which is set by the php121un HTTP COOKIE parameter. The parameter is used in multiple files, including php121login.php. The code execution occurs because the SQL query results are used in an include statement.

Recommendations For PHP121 version 1.4, consider restricting access to the php121un HTTP COOKIE parameter and the sess username variable to minimize the risk of exploitation. As a temporary workaround, avoid using the sess username variable in SQL queries until a patch is available.

Exploit

Correção

Identificadores relacionados

CVE-2006-1828

Produtos afetados

Php121

Referências · 9

• 🔥 https://exploit-db.com/exploits/1666 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25785 · Nota
• http://secunia.com/advisories/19643 · Aviso do Fabricante
• http://securityfocus.com/bid/17509 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1828 · Nota
• http://vupen.com/english/advisories/2006/1349 · Nota
• http://retrogod.altervista.org/php121im_14_sql_xpl.html · Nota
• http://securitytracker.com/id?1015936 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-1828 · Nota de Segurança