PT-2006-4810 · Banex · Banex Php Mysql Banner Exchange

Sirdarckcat · Published 2006-08-01 · Updated 2016-10-18 · CVE-2006-3964

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Banex PHP MySQL Banner Exchange version 2.21

Description The issue allows remote attackers to execute arbitrary PHP code via a URL in the cfg root parameter in the members.php file.

Recommendations For Banex PHP MySQL Banner Exchange version 2.21, consider restricting access to the members.php file or the cfg root parameter to minimize the risk of exploitation until a patch is available.

Exploit

Fix

Related Identifiers

CVE-2006-3964

Affected Products

Banex Php Mysql Banner Exchange

References · 4

• 🔥 https://exploit-db.com/exploits/28308 · Exploit
• 🔥 http://securityfocus.com/bid/19240 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-3964 · Security Note
• http://marc.info/?l=full-disclosure&m=115423462216111&w=2 · Note