PT-2006-3463 · Xoops · Xoops

Rgod · Published 2006-05-22 · Updated 2018-10-18 · CVE-2006-2516

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Medium

Base vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions XOOPS versions 2.0.13.2 and earlier

Description The issue allows remote attackers to conduct directory traversal attacks or include PHP files. This can be achieved by overwriting variables such as $xoopsOption['nocommon'] when register globals is enabled. Attackers can exploit this via xoopsConfig[language] to misc.php or xoopsConfig[theme set] to index.php by injecting PHP sequences into a log file.

Recommendations For XOOPS versions 2.0.13.2 and earlier, consider disabling the register globals setting to prevent variable overwrite attacks. As a temporary workaround, restrict access to misc.php and index.php to minimize the risk of exploitation. Avoid using the xoopsConfig[language] and xoopsConfig[theme set] variables in sensitive operations until the issue is resolved.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2006-2516

Affected Products

Xoops

References · 9

• 🔥 https://exploit-db.com/exploits/1811 · Exploit
• 🔥 http://secunia.com/advisories/20176 · Exploit
• 🔥 http://securityfocus.com/bid/18061 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-2516 · Security Note
• http://vupen.com/english/advisories/2006/1895 · Vendor Advisory
• http://securityreason.com/securityalert/934 · Note
• http://osvdb.org/25683 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2516 · Note
• http://securityfocus.com/archive/1/434698/100/0/threaded · Note