PT-2006-5516 · Idevspot · Idevspot Phplinkexchange

S3Rv3R_Hack3R · Publicado 2006-09-13 · Atualizado 2018-10-17 · CVE-2006-4741

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions IDevSpot PhpLinkExchange version 1.0

Description The issue allows remote attackers to execute arbitrary code via the svr rootPhpStart parameter in the bits listings.php file. This enables the execution of malicious code, potentially leading to system compromise.

Recommendations For IDevSpot PhpLinkExchange version 1.0, consider restricting access to the bits listings.php file to minimize the risk of exploitation. As a temporary workaround, avoid using the svr rootPhpStart parameter until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2006-4741

Produtos afetados

Idevspot Phplinkexchange

Referências · 5

• 🔥 https://exploit-db.com/exploits/2347 · Exploit
• 🔥 http://securityfocus.com/bid/19931 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-4741 · Nota de Segurança
• http://securityfocus.com/archive/1/445780/100/0/threaded · Nota
• http://securityreason.com/securityalert/1561 · Nota