PT-2005-4914 · Phpwebthings · Phpwebthings

Published 2005-12-14 · Updated 2018-10-19 · CVE-2005-4226

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions phpWebThings version 1.4

Description The issue allows remote attackers to execute arbitrary SQL commands via several parameters in different PHP files, including ref in "download.php", direction, msg, sforum, reason, subname, and toform in "forum.php", msg and forum in "forum edit.php" and "forum write.php", tekst in "guestbook.php", menuoption in "index.php", and sel avatar in "myaccount.php".

Recommendations For phpWebThings version 1.4, consider updating to a patched version to resolve the issue. As a temporary workaround, restrict access to the vulnerable parameters in the affected PHP files until a patch is available. Avoid using the parameters ref, direction, msg, sforum, reason, subname, toform, tekst, menuoption, and sel avatar in their respective API endpoints until the issue is resolved.

Exploit

Fix

Related Identifiers

CVE-2005-4226

Affected Products

Phpwebthings

References · 16

• 🔥 https://exploit-db.com/exploits/1325 · Exploit
• 🔥 https://exploit-db.com/exploits/1324 · Exploit
• http://secunia.com/advisories/18011 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-4226 · Security Note
• http://osvdb.org/21652 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/23565 · Note
• http://glide.stanford.edu/yichen/research/sec.pdf · Note
• http://osvdb.org/21656 · Note
• http://securityfocus.com/archive/1/419280/100/0/threaded · Note
• http://securityfocus.com/archive/1/419487/100/0/threaded · Note
• http://osvdb.org/21650 · Note
• http://vupen.com/english/advisories/2005/2860 · Note
• http://osvdb.org/21651 · Note
• http://osvdb.org/21654 · Note
• http://osvdb.org/21655 · Note