PT-2006-6140 · Wsn · Wsn Forum

Kacper · Publicado 2006-10-20 · Atualizado 2017-10-19 · CVE-2006-5421

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions WSN Forum versions 1.3.4 and earlier

Description The issue allows remote attackers to execute arbitrary PHP code by modifying the pathname in the pathtoconfig parameter to point to an avatar image containing PHP code. This code is then accessed from prestart.php. It's worth noting that while this issue has been associated with remote file inclusion in the context of an attack, the underlying problem is distinct from this classification.

Recommendations For WSN Forum versions 1.3.4 and earlier, consider restricting access to the prestart.php file and limiting the ability to modify the pathtoconfig parameter to prevent arbitrary PHP code execution until a fix is available. Additionally, as a temporary workaround, avoid using the pathtoconfig parameter to reference avatar images that could contain PHP code. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2006-5421

Produtos afetados

Wsn Forum

Referências · 7

• 🔥 https://exploit-db.com/exploits/2583 · Exploit
• http://vupen.com/english/advisories/2006/4081 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/29635 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-5421 · Nota de Segurança
• http://secunia.com/advisories/22360 · Aviso do Fabricante
• http://securityfocus.com/bid/20586 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5421 · Nota