PT-2006-4429 · Mkportal · Mkportal

Stormhacker · Published 2006-07-13 · Updated 2018-10-18 · CVE-2006-3554

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions MKPortal version 1.0.1 Final

Description The issue allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the language cookie. This can be demonstrated by using a gl session cookie to inject PHP sequences into the error.log file, which is then included by index.php with malicious commands accessible by the ind parameter.

Recommendations For MKPortal version 1.0.1 Final, consider restricting access to the language cookie and the ind parameter in index.php to minimize the risk of exploitation. As a temporary workaround, restrict the inclusion of local files by index.php until a patch is available.

Exploit

Fix

Related Identifiers

CVE-2006-3554

Affected Products

Mkportal

References · 10

• 🔥 http://worlddefacers.de/Public/WD-MKP.txt · Exploit
• 🔥 http://securitytracker.com/id?1016403 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-3554 · Security Note
• http://secunia.com/advisories/20884 · Vendor Advisory
• http://securityfocus.com/archive/1/438614/100/100/threaded · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27451 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3554 · Note
• http://vupen.com/english/advisories/2006/2598 · Note
• http://securityfocus.com/bid/18707 · Note
• http://securityreason.com/securityalert/1234 · Note