PT-2006-5373 · Tr Forum · Tr Forum

Darkfig · Publicado 2006-09-06 · Atualizado 2018-10-17 · CVE-2006-4586

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Média

Vetor base

AV:N/AC:L/Au:S/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Tr Forum version 2.0

Description The issue allows remote authenticated users to perform unauthorized actions. This can be achieved by modifying user settings via the id parameter to "/membres/modif profil.php" and changing a password via "/membres/change mdp.php". It is also possible to leverage this issue with other Tr Forum vulnerabilities to allow unauthenticated attackers to gain privileges.

Recommendations For Tr Forum version 2.0, consider restricting access to the "/membres/modif profil.php" and "/membres/change mdp.php" API endpoints until a patch is available. As a temporary workaround, restrict the use of the id parameter in these endpoints to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2006-4586

Produtos afetados

Tr Forum

Referências · 11

• 🔥 https://exploit-db.com/exploits/2297 · Exploit
• 🔥 http://acid-root.new.fr/poc/10060903.txt · Exploit
• 🔥 http://securityfocus.com/bid/19834 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-4586 · Nota de Segurança
• http://securityreason.com/securityalert/1508 · Nota
• http://vupen.com/english/advisories/2006/3452 · Nota
• http://osvdb.org/28542 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/28756 · Nota
• http://securitytracker.com/id?1016788 · Nota
• http://securityfocus.com/archive/1/445079/100/0/threaded · Nota
• http://secunia.com/advisories/21754 · Aviso do Fabricante