PT-2006-2583 · Blizzard · Warcraft Iii Replay Parser For Php

Published 2006-04-02 · Updated 2018-10-18 · CVE-2006-1584

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions: Warcraft III Replay Parser for PHP version 1.8c

Description: The issue allows remote attackers to inject arbitrary web script or HTML, possibly related to fopen function calls or file uploads. The page parameter might not be used in this product, and the id parameter could be the affected one.

Recommendations: For version 1.8c, consider restricting access to the id parameter in the affected API endpoint until a patch is available. Avoid using the id parameter in the affected endpoint to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2006-1584

Affected Products

Warcraft Iii Replay Parser For Php

References · 5

• 🔥 https://exploit-db.com/exploits/27537 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-1584 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25686 · Note
• http://securityfocus.com/archive/1/429535/100/0/threaded · Note
• http://securityfocus.com/bid/17334 · Note