PT-2006-4834 · Knusperleicht · Knusperleicht Shoutbox

Kurdish Security · Publicado 2006-08-05 · Atualizado 2018-10-17 · CVE-2006-3989

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Média

Vetor base

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Knusperleicht Shoutbox versions 4.4 and earlier

Description The issue allows remote attackers to execute arbitrary PHP code via a URL in the sb include path parameter in the index.php file.

Recommendations For versions 4.4 and earlier, consider restricting access to the sb include path parameter in the index.php file until a patch is available. As a temporary workaround, avoid using the sb include path parameter with untrusted URLs.

Exploit

Correção

Identificadores relacionados

CVE-2006-3989

Produtos afetados

Knusperleicht Shoutbox

Referências · 9

• 🔥 http://securityfocus.com/bid/19273 · Exploit
• 🔥 https://exploit-db.com/exploits/2103 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-3989 · Nota de Segurança
• http://securityfocus.com/archive/1/441815/100/0/threaded · Nota
• http://securityreason.com/securityalert/1325 · Nota
• http://osvdb.org/27709 · Nota
• http://vupen.com/english/advisories/2006/3090 · Nota
• http://secunia.com/advisories/21302 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/28123 · Nota