PT-2006-4232 · Mambo · Pearl For Mambo

Kw3[R]Ln · Published 2006-07-03 · Updated 2017-10-19 · CVE-2006-3340

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Medium

Base vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Pearl For Mambo module version 1.6 for Mambo

Description The issue allows remote attackers to execute arbitrary PHP code when register globals is enabled. This is achieved via vulnerable parameters in several files, including phpbb root path in includes/functions cms.php and GlobalSettings[templatesDirectory] in multiple files within the "includes" directory, such as adminSensored.php, adminBoards.php, adminAttachments.php, adminAvatars.php, adminBackupdatabase.php, adminBanned.php, adminForums.php, adminPolls.php, adminSmileys.php, poll.php, and move.php.

Recommendations For Pearl For Mambo module version 1.6, consider disabling the register globals setting to prevent exploitation. Additionally, restrict access to the vulnerable parameters phpbb root path and GlobalSettings[templatesDirectory] in the affected files until a patch is available. Avoid using these parameters in the included API endpoints until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2006-3340

Affected Products

Pearl For Mambo

References · 16

• 🔥 https://exploit-db.com/exploits/1956 · Exploit
• 🔥 http://securityfocus.com/bid/18690 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-3340 · Security Note
• http://secunia.com/advisories/20819 · Vendor Advisory
• http://osvdb.org/27176 · Note
• http://osvdb.org/27173 · Note
• http://osvdb.org/27174 · Note
• http://osvdb.org/27168 · Note
• http://osvdb.org/27172 · Note
• http://osvdb.org/27169 · Note
• http://osvdb.org/27178 · Note
• http://osvdb.org/27175 · Note
• http://vupen.com/english/advisories/2006/2561 · Note
• http://osvdb.org/27171 · Note
• http://osvdb.org/27170 · Note