PT-2006-4215 · Phpraid · Phpraid

Publicado 2006-06-30 · Atualizado 2018-10-18 · CVE-2006-3322

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Média

Vetor base

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions phpRaid versions 3.0.5 and possibly other versions

Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the log hack function in the includes/functions logging.php file.

Recommendations For phpRaid version 3.0.5, consider disabling the log hack function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2006-3322

Produtos afetados

Phpraid

Referências · 9

• http://secunia.com/secunia_research/2006-47/advisory · Nota
• http://secunia.com/advisories/20200 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27458 · Nota
• http://securityreason.com/securityalert/1173 · Nota
• http://securityfocus.com/archive/1/438706/100/0/threaded · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3322 · Nota
• http://securityfocus.com/bid/18720 · Correção
• http://vupen.com/english/advisories/2006/2592 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-3322 · Nota de Segurança