PT-2006-6995 · Unknown · Abitwhizzy.Php

Publicado 2006-12-07 · Atualizado 2008-09-05 · CVE-2006-6384

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions abitwhizzy.php versions prior to 20061204

Description The issue allows remote attackers to read arbitrary files via an absolute pathname in the f parameter. This is related to an absolute path traversal vulnerability.

Recommendations For versions prior to 20061204, update to a version released after 20061204 to resolve the issue. As a temporary workaround, consider restricting access to the f parameter in the affected API endpoint until a patch is available.

Correção

Identificadores relacionados

CVE-2006-6384

Produtos afetados

Abitwhizzy.Php

Referências · 2

• http://unverse.net/abitwhizzy-forum/0611251408 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-6384 · Nota de Segurança