PT-2006-6616 · Exo · Exophpdesk

Firewall · Publicado 2006-11-17 · Atualizado 2018-10-17 · CVE-2006-5951

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Exophpdesk version 1.2

Description The issue allows remote attackers to execute arbitrary PHP code via a URL in the lang file parameter in the pipe.php file.

Recommendations For Exophpdesk version 1.2, consider restricting access to the pipe.php file or validating the lang file parameter to prevent remote file inclusion attacks until a patch is available.

Exploit

Correção

Identificadores relacionados

CVE-2006-5951

Produtos afetados

Exophpdesk

Referências · 6

• 🔥 https://exploit-db.com/exploits/28967 · Exploit
• 🔥 http://securityfocus.com/bid/21003 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-5951 · Nota de Segurança
• http://securityfocus.com/archive/1/451308/100/0/threaded · Nota
• http://securityreason.com/securityalert/1878 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/30208 · Nota