PT-2007-1380 · Phpburningportal · Phpburningportal Quiz-Modul

R0Ut3R · Publicado 2007-03-03 · Atualizado 2017-10-11 · CVE-2006-7102

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions phpBurningPortal quiz-modul version 1.0.1 and possibly earlier

Description The issue allows remote attackers to execute arbitrary PHP code via a URL in the lang path parameter to specific PHP files, including "quest delete.php", "quest edit.php", or "quest news.php".

Recommendations For phpBurningPortal quiz-modul version 1.0.1 and possibly earlier, consider restricting access to the lang path parameter in the affected PHP files until a patch is available. As a temporary workaround, avoid using the lang path parameter in the "quest delete.php", "quest edit.php", and "quest news.php" files to minimize the risk of exploitation.

Exploit

Correção

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2006-7102

Produtos afetados

Phpburningportal Quiz-Modul

Referências · 4

• 🔥 http://securityfocus.com/bid/20547 · Exploit
• 🔥 https://exploit-db.com/exploits/2563 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-7102 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/29558 · Nota