PT-2007-1328 · Wikkawiki · Wikkawiki

Publicado 2007-02-24 · Atualizado 2017-07-29 · CVE-2006-7049

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions WikkaWiki versions prior to 1.1.6.2

Description The issue allows remote attackers to bypass intended access restrictions and access arbitrary PHP files due to incorrect argument order in the strstr and strrpos functions called by the Method method.

Recommendations For versions prior to 1.1.6.2, update to version 1.1.6.2 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2006-7049

Produtos afetados

Wikkawiki

Referências · 7

• http://secunia.com/advisories/20628 · Aviso do Fabricante
• http://osvdb.org/26543 · Correção
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27226 · Nota
• http://wikkawiki.org/WikkaReleaseNotes · Nota
• http://vupen.com/english/advisories/2006/2381 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-7049 · Nota de Segurança
• http://securityfocus.com/bid/18484 · Correção