PT-2006-5516 · Idevspot · Idevspot Phplinkexchange

S3Rv3R_Hack3R · Published 2006-09-13 · Updated 2018-10-17 · CVE-2006-4741

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions IDevSpot PhpLinkExchange version 1.0

Description The issue allows remote attackers to execute arbitrary code via the svr rootPhpStart parameter in the bits listings.php file. This enables the execution of malicious code, potentially leading to system compromise.

Recommendations For IDevSpot PhpLinkExchange version 1.0, consider restricting access to the bits listings.php file to minimize the risk of exploitation. As a temporary workaround, avoid using the svr rootPhpStart parameter until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2006-4741

Affected Products

Idevspot Phplinkexchange

References · 5

• 🔥 https://exploit-db.com/exploits/2347 · Exploit
• 🔥 http://securityfocus.com/bid/19931 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-4741 · Security Note
• http://securityfocus.com/archive/1/445780/100/0/threaded · Note
• http://securityreason.com/securityalert/1561 · Note