PT-2006-4160 · Beehive · Bee-Hive Lite
Kw3[R]Ln
·
Published
2006-06-27
·
Updated
2017-10-19
·
CVE-2006-3266
CVSS v2.0
5.1
Medium
| Vector | AV:N/AC:H/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Bee-hive Lite versions 1.2 and earlier
Description
The issue allows remote attackers to execute arbitrary PHP code when register globals is enabled. This can be achieved via several parameters and files, including the
header parameter to "/conad/include/rootGui.inc.php" and "/include/rootGui.inc.php", the mysqlCall parameter to various files such as "/conad/changeEmail.inc.php", "/conad/changeUserDetails.inc.php", "/conad/checkPasswd.inc.php", "/conad/login.inc.php", and "/conad/logout.inc.php", the mysqlcall parameter to "/include/listall.inc.php", the prefix parameter to "/show/index.php", and the config parameter to "/conad/include/mysqlCall.inc.php".Recommendations
For Bee-hive Lite versions 1.2 and earlier, consider disabling the register globals setting to prevent exploitation.
As a temporary workaround, restrict access to the vulnerable files, such as "/conad/include/rootGui.inc.php", "/include/rootGui.inc.php", "/conad/changeEmail.inc.php", "/conad/changeUserDetails.inc.php", "/conad/checkPasswd.inc.php", "/conad/login.inc.php", "/conad/logout.inc.php", "/include/listall.inc.php", "/show/index.php", and "/conad/include/mysqlCall.inc.php", until a patch is available.
Avoid using the
header, mysqlCall, mysqlcall, prefix, and config parameters in the affected files until the issue is resolved.Exploit
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Bee-Hive Lite