PT-2006-5462 · Phpopenchat · Phpopenchat

Published 2006-09-11 · Updated 2024-08-07 · CVE-2006-4677

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions phpopenchat versions prior to 3.0.2

Description The issue allows remote attackers to execute arbitrary PHP code via the sourcedir parameter in the contrib/yabbse/poc.php file. A dispute regarding this issue was raised by a third-party researcher, who claimed that the REQUEST parameters were dynamically unset at the beginning of the file. However, it was noted that the unset PHP function can be bypassed.

Recommendations For versions prior to 3.0.2, update to version 3.0.2 or later to resolve the issue. As a temporary workaround, consider restricting access to the sourcedir parameter in the affected file to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2006-4677

Affected Products

Phpopenchat

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2006-4677 · Security Note
• http://securityfocus.com/archive/1/445522/100/0/threaded · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4677 · Note
• http://phpopenchat.org/index.php · Note
• http://securityfocus.com/archive/1/445580/100/0/threaded · Note
• http://securityfocus.com/archive/1/445384/100/0/threaded · Note