PT-2006-5390 · Php+1 · Php+2

Kacper · Published 2006-09-07 · Updated 2017-10-19 · CVE-2006-4604

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Lanifex Database of Managed Objects (DMO) versions 2.3 Beta and earlier

Description The issue allows remote attackers to execute arbitrary PHP code. This is achieved via the incMgr parameter in the LFXlib/access manager.php file.

Recommendations For versions 2.3 Beta and earlier, update to a version later than 2.3 Beta to resolve the issue.

Exploit

Fix

Related Identifiers

CVE-2006-4604

Affected Products

Lfxlib

Lanifex Database Of Managed Objects

Php

References · 4

• 🔥 http://securityfocus.com/bid/19773 · Exploit
• 🔥 https://exploit-db.com/exploits/2280 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-4604 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/28673 · Note