PT-2006-5586 · Photopost · Photopost

Saudi · Publicado 2006-09-15 · Atualizado 2018-10-17 · CVE-2006-4828

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions PhotoPost versions 4.0 through 4.6

Description The issue allows remote attackers to execute arbitrary PHP code via a URL in the PP PATH parameter in the zipndownload.php file. This enables attackers to potentially gain control over the affected system.

Recommendations For PhotoPost versions 4.0 through 4.6, consider restricting access to the zipndownload.php file until a patch is available. As a temporary workaround, avoid using the PP PATH parameter in the affected file to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2006-4828

Produtos afetados

Photopost

Referências · 7

• 🔥 https://exploit-db.com/exploits/2369 · Exploit
• 🔥 http://securityfocus.com/bid/20028 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/28948 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-4828 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4828 · Nota
• http://securityreason.com/securityalert/1581 · Nota
• http://securityfocus.com/archive/1/446031/100/0/threaded · Nota