PT-2006-6345 · Unknown · Faq Administrator

V1Per-Hacker · Publicado 2006-11-01 · Atualizado 2017-10-19 · CVE-2006-5637

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Faq Administrator version 2.1b

Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the email parameter in the faq reply.php file.

Recommendations: For Faq Administrator version 2.1b, consider restricting access to the faq reply.php file or validating and sanitizing the email parameter to prevent remote file inclusion attacks.

Exploit

Correção

Identificadores relacionados

CVE-2006-5637

Produtos afetados

Faq Administrator

Referências · 8

• 🔥 http://securityfocus.com/bid/20796 · Exploit
• 🔥 http://attrition.org/pipermail/vim/2006-October/001100.html · Exploit
• 🔥 https://exploit-db.com/exploits/2678 · Exploit
• http://secunia.com/advisories/22621 · Aviso do Fabricante
• http://vupen.com/english/advisories/2006/4254 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/29868 · Nota
• http://osvdb.org/30115 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-5637 · Nota de Segurança