PT-2006-3918 · Phpbannerexchange · Phpbannerexchange

Publicado 2006-06-19 · Atualizado 2018-10-18 · CVE-2006-3013

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Média

Vetor base

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions phpBannerExchange versions prior to 2.0 Update 6

Description The issue arises from an interpretation conflict in the resetpw.php file, allowing remote attackers to execute arbitrary SQL commands. This is achieved by including a null (%00) character after a valid e-mail address in the email parameter, which bypasses the validation check performed by the eregi PHP command.

Recommendations For versions prior to 2.0 Update 6, consider updating to version 2.0 Update 6 or later to resolve the issue. As a temporary workaround, restrict the use of the email parameter in the resetpw.php file to prevent potential SQL command execution.

Exploit

Correção

Identificadores relacionados

CVE-2006-3013

Produtos afetados

Phpbannerexchange

Referências · 10

• 🔥 http://eschew.net/scripts/phpbe/2.0/releasenotes.php · Exploit
• http://redteam-pentesting.de/advisories/rt-sa-2006-005.txt · Nota
• http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/046953.html · Nota
• http://securityfocus.com/bid/18448 · Correção
• http://vupen.com/english/advisories/2006/2358 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-3013 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27193 · Nota
• http://secunia.com/advisories/20687 · Aviso do Fabricante
• http://osvdb.org/26509 · Nota
• http://securityfocus.com/archive/1/437294/100/0/threaded · Nota