PT-2006-4811 · Banex · Banex Php Mysql Banner Exchange

Sirdarckcat · Published 2006-08-01 · Updated 2016-10-18 · CVE-2006-3965

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Banex PHP MySQL Banner Exchange version 2.21

Description The issue allows remote attackers to obtain sensitive information, such as database usernames and passwords, due to insufficient access control of the lib.inc file stored under the web document root.

Recommendations For Banex PHP MySQL Banner Exchange version 2.21, consider restricting access to the lib.inc file to prevent remote attackers from obtaining sensitive information. As a temporary workaround, move the lib.inc file outside of the web document root or apply appropriate access controls to limit exposure.

Fix

Related Identifiers

CVE-2006-3965

Affected Products

Banex Php Mysql Banner Exchange

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2006-3965 · Security Note
• http://marc.info/?l=full-disclosure&m=115423462216111&w=2 · Note