PT-2006-5028 · Phpay · Phpay

Beford · Publicado 2006-08-17 · Atualizado 2017-10-19 · CVE-2006-4210

Positive Technologies (AI Summary)

CVSS v2.0

2.6

Baixa

Vetor base

AV:N/AC:H/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions phPay versions 2.02 through 2.02.1

Description The issue allows remote attackers to use the server as an open mail relay. This is possible when the register globals setting is enabled, and attackers can modify certain parameters, including mail text2, user row[5], nu mail 1, and shop mail.

Recommendations For phPay versions 2.02 through 2.02.1, disable the register globals setting to prevent exploitation. Additionally, restrict access to the nu mail.inc.php file and avoid using the vulnerable parameters until a fix is available.

Exploit

Correção

Identificadores relacionados

CVE-2006-4210

Produtos afetados

Phpay

Referências · 5

• 🔥 https://exploit-db.com/exploits/2181 · Exploit
• http://secunia.com/advisories/21454 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2006-4210 · Nota de Segurança
• http://securityfocus.com/bid/19517 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/28366 · Nota