PT-2007-1361 · Rigter · Rigter Portal System

0O_Zeus_O0 · Publicado 2007-02-27 · Atualizado 2017-07-29 · CVE-2006-7082

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Rigter Portal System (RPS) versions 1.0 through 3.0

Description The issue allows remote attackers to bypass authentication and upload arbitrary files. This can be achieved via direct requests to API endpoints such as "adm/photos/images.php" and "adm/down/files.php".

Recommendations For versions 1.0 through 3.0, restrict access to the "adm/photos/images.php" and "adm/down/files.php" API endpoints to prevent unauthorized file uploads. Consider implementing proper authentication mechanisms to prevent bypass attacks.

Exploit

Correção

Identificadores relacionados

CVE-2006-7082

Produtos afetados

Rigter Portal System

Referências · 6

• 🔥 http://lists.grok.org.uk/pipermail/full-disclosure/2006-July/048006.html · Exploit
• http://osvdb.org/28637 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-7082 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27873 · Nota
• http://securityreason.com/securityalert/2322 · Nota
• http://osvdb.org/28638 · Nota