PT-2006-5395 · Phprojekt · Phprojekt

D3Nger · Published 2006-09-07 · Updated 2024-08-07 · CVE-2006-4609

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Medium

Base vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions PHProjekt version 0.6.1

Description The issue allows remote attackers to execute arbitrary PHP code via the path pre parameter in several PHP files, including cm lib.inc.php, doc/br.edithelp.php, doc/de.edithelp.php, doc/ct.edithelp.php, userrating.php, and listing.php, when register globals is enabled. However, the impact of some vectors has been disputed, with claims that the cm lib.inc.php vector is limited to local file inclusion and that the path pre variable is initialized before use in the other vectors.

Recommendations For PHProjekt version 0.6.1, consider disabling the register globals setting to prevent exploitation. Additionally, restrict access to the affected PHP files until a patch is available. As a temporary workaround, avoid using the path pre parameter in the affected API endpoints until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2006-4609

Affected Products

Phprojekt

References · 8

• 🔥 https://exploit-db.com/exploits/28418 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-4609 · Security Note
• http://secunia.com/advisories/21590 · Note
• http://securityfocus.com/archive/1/444076/100/100/threaded · Note
• http://osvdb.org/28217 · Note
• http://securityreason.com/securityalert/1495 · Note
• http://vupen.com/english/advisories/2006/3373 · Note
• http://securityfocus.com/archive/1/444220/100/100/threaded · Note