PT-2006-5643 · Telekorn · Telekorn Signkorn Guestbook

The__Leo · Publicado 2006-09-19 · Atualizado 2024-02-14 · CVE-2006-4889

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Média

Vetor base

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Telekorn SignKorn Guestbook (SL) versions 1.3 and earlier

Description The issue allows remote attackers to execute arbitrary PHP code via a URL in the dir path parameter in multiple PHP files, including "index.php", "includes/functions.gb.php", "includes/functions.admin.php", "includes/admin.inc.php", "help.php", "smile.php", "entry.php", "adminhelp0.php", "adminhelp1.php", "adminhelp2.php", "adminhelp3.php" in "help/en" and "help/de" directories, and "preview.php", "log.php", "index.php", "config.php", and "admin.php" in the "admin" directory, when register globals is enabled.

Recommendations For Telekorn SignKorn Guestbook (SL) versions 1.3 and earlier, consider disabling the register globals setting to prevent exploitation. As a temporary workaround, restrict access to the vulnerable PHP files until a patch is available. Avoid using the dir path parameter in the affected PHP files until the issue is resolved.

Exploit

Correção

Identificadores relacionados

CVE-2006-4889

Produtos afetados

Telekorn Signkorn Guestbook

Referências · 47

• 🔥 https://exploit-db.com/exploits/28525 · Exploit
• 🔥 https://exploit-db.com/exploits/28538 · Exploit
• 🔥 https://exploit-db.com/exploits/28540 · Exploit
• 🔥 https://exploit-db.com/exploits/28527 · Exploit
• 🔥 https://exploit-db.com/exploits/28522 · Exploit
• 🔥 https://exploit-db.com/exploits/28532 · Exploit
• 🔥 https://exploit-db.com/exploits/28533 · Exploit
• 🔥 https://exploit-db.com/exploits/28539 · Exploit
• 🔥 https://exploit-db.com/exploits/28535 · Exploit
• 🔥 https://exploit-db.com/exploits/28530 · Exploit
• 🔥 https://exploit-db.com/exploits/2354 · Exploit
• 🔥 https://exploit-db.com/exploits/28528 · Exploit
• 🔥 https://exploit-db.com/exploits/28531 · Exploit
• 🔥 https://exploit-db.com/exploits/28536 · Exploit
• 🔥 https://exploit-db.com/exploits/28534 · Exploit