PT-2006-3314 · Oracle · E-Business Designer

Pedro Andjar · Published 2006-05-12 · Updated 2018-10-18 · CVE-2006-2349

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions E-Business Designer (eBD) versions 3.1.4 and earlier

Description The issue allows remote attackers to upload or modify arbitrary files and execute arbitrary code by making a direct request to specific API endpoints, such as "common/html editor/image browser.upload.html", "common/html editor/image browser.html", or "common/html editor/html editor.html". This can also be exploited for cross-site scripting (XSS) attacks by uploading cascading style sheet (.CSS) files.

Recommendations For versions 3.1.4 and earlier, consider restricting access to the vulnerable API endpoints "common/html editor/image browser.upload.html", "common/html editor/image browser.html", and "common/html editor/html editor.html" to prevent arbitrary file uploads and code execution. As a temporary workaround, avoid using these endpoints until a patch is available.

Exploit

Fix

Related Identifiers

CVE-2006-2349

Affected Products

E-Business Designer

References · 11

• 🔥 http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/045980.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-2349 · Security Note
• http://secunia.com/advisories/20071 · Vendor Advisory
• http://lists.oasyssoft.com/ebd-devel/200605/msg00000.html · Note
• http://marc.info/?l=bugtraq&m=115047779610633&w=2 · Note
• http://securityreason.com/securityalert/891 · Note
• http://vupen.com/english/advisories/2006/1784 · Note
• http://securityfocus.com/archive/1/433807/100/0/threaded · Note
• http://securityfocus.com/bid/17933 · Note
• http://securitytracker.com/id?1016326 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26474 · Note