PT-2006-6195 · Castor · Castor Php Web Builder

Kw3[R]Ln · Publicado 2006-10-24 · Atualizado 2017-10-19 · CVE-2006-5480

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Média

Vetor base

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Castor PHP Web Builder version 1.1.1

Description The issue allows remote attackers to execute arbitrary PHP code via the rootpath parameter in the lib/rs.php file.

Recommendations For Castor PHP Web Builder version 1.1.1, consider restricting access to the lib/rs.php file or avoiding the use of the rootpath parameter until a fix is available.

Exploit

Correção

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2006-5480

Produtos afetados

Castor Php Web Builder

Referências · 6

• 🔥 http://secunia.com/advisories/22527 · Exploit
• 🔥 https://exploit-db.com/exploits/2606 · Exploit
• 🔥 http://securityfocus.com/bid/20658 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-5480 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/29704 · Nota
• http://vupen.com/english/advisories/2006/4143 · Aviso do Fabricante