PT-2006-4810 · Banex · Banex Php Mysql Banner Exchange

Sirdarckcat · Publicado 2006-08-01 · Atualizado 2016-10-18 · CVE-2006-3964

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Banex PHP MySQL Banner Exchange version 2.21

Description The issue allows remote attackers to execute arbitrary PHP code via a URL in the cfg root parameter in the members.php file.

Recommendations For Banex PHP MySQL Banner Exchange version 2.21, consider restricting access to the members.php file or the cfg root parameter to minimize the risk of exploitation until a patch is available.

Exploit

Correção

Identificadores relacionados

CVE-2006-3964

Produtos afetados

Banex Php Mysql Banner Exchange

Referências · 4

• 🔥 https://exploit-db.com/exploits/28308 · Exploit
• 🔥 http://securityfocus.com/bid/19240 · Exploit
• http://marc.info/?l=full-disclosure&m=115423462216111&w=2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-3964 · Nota de Segurança