PT-2005-4870 · Efiction · Efiction

Published 2005-12-11 · Updated 2008-09-05 · CVE-2005-4171

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions eFiction version 1.1

Description The issue allows remote attackers to execute arbitrary PHP code by uploading a filename with a .php extension that contains a GIF header. This passes the image validity check but executes any PHP code within the file, occurring when members are allowed to upload images through the "Upload new image" command in the "Manage Images" section.

Recommendations For eFiction version 1.1, as a temporary workaround, consider disabling the image upload functionality until a patch is available. Restrict access to the "Manage Images" section to minimize the risk of exploitation. Avoid allowing members to upload files with .php extensions to prevent arbitrary PHP code execution. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2005-4171

Affected Products

Efiction

References · 9

• 🔥 https://exploit-db.com/exploits/1340 · Exploit
• 🔥 http://secunia.com/advisories/17777 · Exploit
• 🔥 http://archives.neohapsis.com/archives/bugtraq/2005-11/0301.html · Exploit
• 🔥 http://securitytracker.com/id?1015273 · Exploit
• 🔥 http://rgod.altervista.org/efiction2_xpl.html · Exploit
• 🔥 http://securityfocus.com/bid/15568 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-4171 · Security Note
• http://efiction.wallflowergirl.com/forums/viewtopic.php?t=1555 · Note
• http://osvdb.org/21124 · Note