PT-2006-4811 · Banex · Banex Php Mysql Banner Exchange

Sirdarckcat · Publicado 2006-08-01 · Atualizado 2016-10-18 · CVE-2006-3965

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Banex PHP MySQL Banner Exchange version 2.21

Description The issue allows remote attackers to obtain sensitive information, such as database usernames and passwords, due to insufficient access control of the lib.inc file stored under the web document root.

Recommendations For Banex PHP MySQL Banner Exchange version 2.21, consider restricting access to the lib.inc file to prevent remote attackers from obtaining sensitive information. As a temporary workaround, move the lib.inc file outside of the web document root or apply appropriate access controls to limit exposure.

Correção

Identificadores relacionados

CVE-2006-3965

Produtos afetados

Banex Php Mysql Banner Exchange

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2006-3965 · Nota de Segurança
• http://marc.info/?l=full-disclosure&m=115423462216111&w=2 · Nota