PT-2006-4216 · Mf Piadas · Mf Piadas

Botan · Published 2006-06-30 · Updated 2018-10-18 · CVE-2006-3323

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions MF Piadas version 1.0

Description A remote file inclusion issue in the admin/admin.php file allows remote attackers to execute arbitrary PHP code via the page parameter. This can also lead to cross-site scripting, likely due to the inclusion of HTML or script files.

Recommendations For MF Piadas version 1.0, consider restricting access to the admin/admin.php file and validating the page parameter to prevent remote file inclusion until a patch is available. As a temporary workaround, avoid using the page parameter in the affected file to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2006-3323

Affected Products

Mf Piadas

References · 14

• 🔥 https://exploit-db.com/exploits/28117 · Exploit
• 🔥 https://exploit-db.com/exploits/28115 · Exploit
• 🔥 http://securityfocus.com/bid/18676 · Exploit
• 🔥 http://securityfocus.com/bid/18679 · Exploit
• 🔥 http://kurdishsecurity.blogspot.com/2006/06/kurdish-security-10-mf-piadas-10.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-3323 · Security Note
• http://secunia.com/advisories/20847 · Vendor Advisory
• http://osvdb.org/26867 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27412 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27415 · Note
• http://osvdb.org/26868 · Note
• http://vupen.com/english/advisories/2006/2567 · Note
• http://securityreason.com/securityalert/1172 · Note
• http://securityfocus.com/archive/1/438496/100/0/threaded · Note