PT-2006-5851 · Exporia · Exporia

Publicado 2006-10-02 · Atualizado 2017-07-20 · CVE-2006-5113

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Exporia version 0.3.0

Description A directory traversal issue exists, allowing remote attackers to include and execute local files. This is achieved by providing a .. (dot dot) in the lan parameter to the "includes.php" endpoint.

Recommendations For Exporia version 0.3.0, consider restricting access to the "includes.php" endpoint to minimize the risk of exploitation. Avoid using the lan parameter in the affected endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2006-5113

Produtos afetados

Exporia

Referências · 6

• https://exchange.xforce.ibmcloud.com/vulnerabilities/29326 · Nota
• http://osvdb.org/29218 · Nota
• http://secunia.com/advisories/22146 · Aviso do Fabricante
• http://vupen.com/english/advisories/2006/3799 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-5113 · Nota de Segurança
• http://packetstormsecurity.org/0610-exploits/Exporia-0.3.0.txt · Nota