PT-2006-4905 · Php · Phpprintanalyzer

Published 2006-08-10 · Updated 2024-08-07 · CVE-2006-4061

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions phpPrintAnalyzer version 1.1

Description A remote file inclusion issue in index.php allows remote attackers to execute arbitrary PHP code when register globals is enabled. This is achieved via a URL in the rep par rapport racine parameter. However, it's noted that this issue has been disputed by third-party researchers, who claim that the rep par rapport racine variable is initialized before use.

Recommendations For phpPrintAnalyzer version 1.1, consider disabling the register globals setting to mitigate the risk of exploitation. As a temporary workaround, restrict access to the index.php file until a patch is available. Avoid using the rep par rapport racine parameter in the affected API endpoint until the issue is resolved.

Exploit

Fix

Related Identifiers

CVE-2006-4061

Affected Products

Phpprintanalyzer

References · 7

• 🔥 https://exploit-db.com/exploits/28359 · Exploit
• 🔥 http://securityfocus.com/bid/19397 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-4061 · Security Note
• http://osvdb.org/29133 · Note
• http://securityfocus.com/archive/1/442492/100/0/threaded · Note
• http://securitytracker.com/id?1016652 · Note
• http://archives.neohapsis.com/archives/bugtraq/2006-08/0305.html · Note