PT-2006-2894 · S9Y · S9Y Serendipity

Publicado 2006-04-20 · Atualizado 2008-09-05 · CVE-2006-1910

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions S9Y Serendipity version 1.0 beta 2

Description The issue allows remote attackers to inject arbitrary PHP code by editing values stored in config.php, which are later executed.

Recommendations For S9Y Serendipity version 1.0 beta 2, consider restricting access to the config.php file to prevent unauthorized modifications until a fix is available.

Exploit

Correção

Identificadores relacionados

CVE-2006-1910

Produtos afetados

S9Y Serendipity

Referências · 4

• 🔥 http://securityfocus.com/bid/17566 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-1910 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1910 · Nota
• http://archives.neohapsis.com/archives/bugtraq/2006-04/0282.html · Nota