PT-2006-5390 · Php+1 · Php+2

Kacper · Publicado 2006-09-07 · Atualizado 2017-10-19 · CVE-2006-4604

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Lanifex Database of Managed Objects (DMO) versions 2.3 Beta and earlier

Description The issue allows remote attackers to execute arbitrary PHP code. This is achieved via the incMgr parameter in the LFXlib/access manager.php file.

Recommendations For versions 2.3 Beta and earlier, update to a version later than 2.3 Beta to resolve the issue.

Exploit

Correção

Identificadores relacionados

CVE-2006-4604

Produtos afetados

Lfxlib

Lanifex Database Of Managed Objects

Php

Referências · 4

• 🔥 http://securityfocus.com/bid/19773 · Exploit
• 🔥 https://exploit-db.com/exploits/2280 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/28673 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-4604 · Nota de Segurança