PT-2006-7031 · Agileco · Agilevoice+1

Publicado 2006-12-10 · Atualizado 2017-07-29 · CVE-2006-6422

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Agileco AgileBill versions 1.4.x Agileco AgileVoice versions 1.4.x

Description The issue arises from improper handling of certain proxy requests, allowing remote attackers to potentially disable the application. This can be achieved by entering invalid license data on a form, which may involve the modules/core/license.inc.php file.

Recommendations For Agileco AgileBill version 1.4.x, consider restricting access to the modules/core/license.inc.php file until a proper fix is available. For Agileco AgileVoice version 1.4.x, avoid using the form that accepts license data until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2006-6422

Produtos afetados

Agilebill

Agilevoice

Referências · 4

• https://exchange.xforce.ibmcloud.com/vulnerabilities/30751 · Nota
• http://secunia.com/advisories/23223 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2006-6422 · Nota de Segurança
• http://securityfocus.com/bid/21459 · Nota