PT-2006-5603 · Hitweb · Hitweb

Erne · Publicado 2006-09-19 · Atualizado 2024-08-07 · CVE-2006-4848

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Hitweb versions 3.0

Description The issue concerns remote file inclusion vulnerabilities in Hitweb 3.0, allowing remote attackers to execute arbitrary PHP code. This is achieved by providing a URL in the REP CLASS parameter to various PHP files, including "index.php", "arbo.php", "framepoint.php", "genpage.php", "lienvalider.php", "appreciation.php", "partenariat.php", "rechercher.php", "projet.php", "propoexample.php", "refererpoint.php", or "top50.php". However, it has been disputed by a third-party researcher, who claims that REP CLASS is initialized in an included file before being used.

Recommendations For Hitweb version 3.0, as a temporary workaround, consider restricting access to the REP CLASS parameter in the affected PHP files until a patch is available. Additionally, restrict access to the affected API endpoints, such as "index.php", "arbo.php", "framepoint.php", "genpage.php", "lienvalider.php", "appreciation.php", "partenariat.php", "rechercher.php", "projet.php", "propoexample.php", "refererpoint.php", or "top50.php", to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2006-4848

Produtos afetados

Hitweb

Referências · 6

• 🔥 http://securityfocus.com/bid/20060 · Exploit
• 🔥 https://exploit-db.com/exploits/28590 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-4848 · Nota de Segurança
• http://securityfocus.com/archive/1/446567/100/200/threaded · Nota
• http://securityreason.com/securityalert/1590 · Nota
• http://securityfocus.com/archive/1/446219/100/0/threaded · Nota