PT-2006-4070 · Mcguestbook · Myco Guestbook

Sweet-Devil · Publicado 2006-06-23 · Atualizado 2018-10-18 · CVE-2006-3175

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions mcGuestbook versions 1.2 through 1.3

Description The issue allows remote attackers to execute arbitrary PHP code via a URL in the lang parameter to API endpoints such as "admin.php", "ecrire.php", and "lire.php". It is noted that the issue might be limited to a race condition during installation or an improper installation, since a completed installation creates an include file that prevents external control of the lang variable.

Recommendations For mcGuestbook versions 1.2 through 1.3, consider disabling access to the "admin.php", "ecrire.php", and "lire.php" API endpoints until a proper fix is applied, and ensure proper installation to prevent external control of the lang variable.

Exploit

Correção

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2006-3175

Produtos afetados

Myco Guestbook

Referências · 12

• 🔥 https://exploit-db.com/exploits/28037 · Exploit
• 🔥 https://exploit-db.com/exploits/28036 · Exploit
• 🔥 https://exploit-db.com/exploits/28035 · Exploit
• http://securityreason.com/securityalert/1125 · Nota
• http://securityfocus.com/archive/1/437028/100/200/threaded · Nota
• http://osvdb.org/27460 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27114 · Nota
• http://securityfocus.com/archive/1/437448/100/0/threaded · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-3175 · Nota de Segurança
• http://securityfocus.com/bid/18476 · Nota
• http://osvdb.org/27461 · Nota
• http://osvdb.org/27462 · Nota