PT-2006-6264 · Adobe · Php Sdk

Crackers_Child · CVE-2006-5549 · Publicado 2006-10-26 · Atualizado 2024-08-07

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Adobe PHP SDK (affected versions not specified)

Description: A remote file inclusion issue in the Adobe PHP SDK allows remote attackers to execute arbitrary PHP code via the AMFPHP BASE parameter in the CachedGateway.php file. This issue has been disputed by a third-party researcher who claims that AMFPHP BASE is a constant.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2006-5549

Produtos afetados

Php Sdk

Referências · 5

• http://securityfocus.com/archive/1/449576/100/0/threaded · Nota
• http://securityfocus.com/archive/1/449616/100/0/threaded · Nota
• http://securityreason.com/securityalert/1784 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-5549 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/29776 · Nota