PT-2006-1804 · Dotproject · Dotproject

Published 2006-02-18 · Updated 2025-01-16 · CVE-2006-0755

Positive Technologies (AI Summary)

CVSS v3.1

5.6

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions dotProject versions 2.0.1 and earlier

Description The issue allows remote attackers to execute arbitrary commands via the baseDir parameter in several PHP files, including db adodb.php, db connect.php, session.php, vw usr roles.php, calendar.php, date format.php, and tasks/gantt.php, and the dPconfig[root dir] parameter in projects/gantt.php, gantt2.php, and vw files.php, when register globals is enabled. The vendor disputes this issue, stating that the product documentation clearly recommends disabling register globals and that the check.php script warns against this setting.

Recommendations For dotProject versions 2.0.1 and earlier, consider disabling the register globals setting to mitigate the risk of exploitation. As a temporary workaround, restrict access to the vulnerable parameters baseDir and dPconfig[root dir] in the affected PHP files until a fix is available.

Exploit

Fix

Related Identifiers

CVE-2006-0755

Affected Products

Dotproject

References · 29

• 🔥 https://exploit-db.com/exploits/27218 · Exploit
• 🔥 https://exploit-db.com/exploits/27223 · Exploit
• 🔥 https://exploit-db.com/exploits/27224 · Exploit
• 🔥 https://exploit-db.com/exploits/27222 · Exploit
• 🔥 https://exploit-db.com/exploits/27220 · Exploit
• 🔥 https://exploit-db.com/exploits/27219 · Exploit
• 🔥 http://securityfocus.com/bid/16648 · Exploit
• 🔥 https://exploit-db.com/exploits/27225 · Exploit
• 🔥 https://exploit-db.com/exploits/27221 · Exploit
• 🔥 https://exploit-db.com/exploits/27217 · Exploit
• 🔥 https://exploit-db.com/exploits/22708 · Exploit
• http://secunia.com/advisories/18879 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-0755 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24738 · Note
• http://osvdb.org/23210 · Note