PT-2006-4429 · Mkportal · Mkportal

Stormhacker · Publicado 2006-07-13 · Atualizado 2018-10-18 · CVE-2006-3554

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions MKPortal version 1.0.1 Final

Description The issue allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the language cookie. This can be demonstrated by using a gl session cookie to inject PHP sequences into the error.log file, which is then included by index.php with malicious commands accessible by the ind parameter.

Recommendations For MKPortal version 1.0.1 Final, consider restricting access to the language cookie and the ind parameter in index.php to minimize the risk of exploitation. As a temporary workaround, restrict the inclusion of local files by index.php until a patch is available.

Exploit

Correção

Identificadores relacionados

CVE-2006-3554

Produtos afetados

Mkportal

Referências · 10

• 🔥 http://worlddefacers.de/Public/WD-MKP.txt · Exploit
• 🔥 http://securitytracker.com/id?1016403 · Exploit
• http://securityfocus.com/archive/1/438614/100/100/threaded · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27451 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3554 · Nota
• http://vupen.com/english/advisories/2006/2598 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-3554 · Nota de Segurança
• http://securityfocus.com/bid/18707 · Nota
• http://secunia.com/advisories/20884 · Aviso do Fabricante
• http://securityreason.com/securityalert/1234 · Nota