PT-2006-3454 · Unknown · Teake Nutma Foing

Botan · Publicado 2006-05-22 · Atualizado 2018-10-18 · CVE-2006-2507

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Teake Nutma Foing versions 0.2.0 through 0.7.0

Description The issue allows remote attackers to execute arbitrary PHP code via a URL in the phpbb root path parameter in various PHP files, including "index.php", "song.php", "faq.php", "list.php", "gen m3u.php", and "playlist.php".

Recommendations For Teake Nutma Foing versions 0.2.0 through 0.7.0, consider restricting access to the phpbb root path parameter in the affected PHP files until a patch is available. As a temporary workaround, avoid using the phpbb root path parameter in the affected API endpoints, such as "index.php", "song.php", "faq.php", "list.php", "gen m3u.php", and "playlist.php", to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2006-2507

Produtos afetados

Teake Nutma Foing

Referências · 11

• 🔥 http://securityfocus.com/bid/17963 · Exploit
• 🔥 http://secunia.com/advisories/20092 · Exploit
• 🔥 http://kurdishsecurity.blogspot.com/2006/05/kurdish-security-7-foing-remote-file.html · Exploit
• 🔥 https://exploit-db.com/exploits/1778 · Exploit
• http://osvdb.org/25564 · Nota
• http://vupen.com/english/advisories/2006/1793 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-2507 · Nota de Segurança
• http://securityreason.com/securityalert/932 · Nota
• http://securityfocus.com/archive/1/433824/100/0/threaded · Nota
• http://securityfocus.com/archive/1/435302/100/0/threaded · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26425 · Nota