PT-2006-6024 · Unknown · Redaction System

R0Ut3R · Publicado 2006-10-17 · Atualizado 2017-10-19 · CVE-2006-5302

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Redaction System version 1.0000

Description The issue allows remote attackers to execute arbitrary PHP code via a URL in specific parameters. This can be achieved by manipulating the lang prefix parameter in the following API endpoints: "conn.php", "sesscheck.php", "wap/conn.php", or "wap/sesscheck.php", or the lang parameter in the "index.php" endpoint.

Recommendations For Redaction System version 1.0000, consider disabling the lang prefix and lang parameters in the affected API endpoints until a patch is available. Restrict access to the vulnerable endpoints "conn.php", "sesscheck.php", "wap/conn.php", "wap/sesscheck.php", and "index.php" to minimize the risk of exploitation. Avoid using the lang prefix and lang parameters in these endpoints until the issue is resolved.

Exploit

Correção

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2006-5302

Produtos afetados

Redaction System

Referências · 13

• 🔥 https://exploit-db.com/exploits/2534 · Exploit
• http://redactionsystem.sourceforge.net/index.php?m=news&id=5 · Nota
• http://securityfocus.com/bid/20499 · Nota
• http://secunia.com/advisories/22347 · Aviso do Fabricante
• http://osvdb.org/29701 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/29504 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-5302 · Nota de Segurança
• http://osvdb.org/29703 · Nota
• http://osvdb.org/29704 · Nota
• http://osvdb.org/29702 · Nota
• http://osvdb.org/29700 · Nota
• http://vupen.com/english/advisories/2006/4024 · Aviso do Fabricante
• http://redactionsystem.sourceforge.net/index.php?m=news&id=2 · Nota