PT-2006-2943 · Actual · Actualscripts Server+2

Aesthetico · Publicado 2006-04-21 · Atualizado 2018-10-18 · CVE-2006-1959

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions ActualAnalyzer Lite versions 2.72 and earlier ActualScripts Gold versions 7.63 and earlier ActualScripts Server versions 8.23 and earlier

Description The issue allows remote attackers to execute arbitrary code via a URL in the rf parameter. This is a result of a remote file inclusion vulnerability in the direct.php file.

Recommendations For ActualAnalyzer Lite versions 2.72 and earlier, update to a version later than 2.72. For ActualScripts Gold versions 7.63 and earlier, update to a version later than 7.63. For ActualScripts Server versions 8.23 and earlier, update to a version later than 8.23.

Exploit

Correção

Identificadores relacionados

CVE-2006-1959

Produtos afetados

Actualanalyzer Lite

Actualscripts Gold

Actualscripts Server

Referências · 11

• 🔥 https://exploit-db.com/exploits/1767 · Exploit
• http://securitytracker.com/id?1015967 · Nota
• http://securityfocus.com/archive/1/431351/100/0/threaded · Nota
• http://vupen.com/english/advisories/2006/1430 · Nota
• http://securityfocus.com/bid/17597 · Nota
• http://secunia.com/advisories/19743 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25893 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-1959 · Nota de Segurança
• http://osvdb.org/24778 · Nota
• http://securityfocus.com/archive/1/434562/100/0/threaded · Nota
• http://securityreason.com/securityalert/742 · Nota