PT-2006-5373 · Tr Forum · Tr Forum

Darkfig · Published 2006-09-06 · Updated 2018-10-17 · CVE-2006-4586

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Tr Forum version 2.0

Description The issue allows remote authenticated users to perform unauthorized actions. This can be achieved by modifying user settings via the id parameter to "/membres/modif profil.php" and changing a password via "/membres/change mdp.php". It is also possible to leverage this issue with other Tr Forum vulnerabilities to allow unauthenticated attackers to gain privileges.

Recommendations For Tr Forum version 2.0, consider restricting access to the "/membres/modif profil.php" and "/membres/change mdp.php" API endpoints until a patch is available. As a temporary workaround, restrict the use of the id parameter in these endpoints to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2006-4586

Affected Products

Tr Forum

References · 11

• 🔥 https://exploit-db.com/exploits/2297 · Exploit
• 🔥 http://acid-root.new.fr/poc/10060903.txt · Exploit
• 🔥 http://securityfocus.com/bid/19834 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-4586 · Security Note
• http://secunia.com/advisories/21754 · Vendor Advisory
• http://securityreason.com/securityalert/1508 · Note
• http://vupen.com/english/advisories/2006/3452 · Note
• http://osvdb.org/28542 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/28756 · Note
• http://securitytracker.com/id?1016788 · Note
• http://securityfocus.com/archive/1/445079/100/0/threaded · Note