PT-2006-5603 · Hitweb · Hitweb

Erne · Published 2006-09-19 · Updated 2024-08-07 · CVE-2006-4848

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Hitweb versions 3.0

Description The issue concerns remote file inclusion vulnerabilities in Hitweb 3.0, allowing remote attackers to execute arbitrary PHP code. This is achieved by providing a URL in the REP CLASS parameter to various PHP files, including "index.php", "arbo.php", "framepoint.php", "genpage.php", "lienvalider.php", "appreciation.php", "partenariat.php", "rechercher.php", "projet.php", "propoexample.php", "refererpoint.php", or "top50.php". However, it has been disputed by a third-party researcher, who claims that REP CLASS is initialized in an included file before being used.

Recommendations For Hitweb version 3.0, as a temporary workaround, consider restricting access to the REP CLASS parameter in the affected PHP files until a patch is available. Additionally, restrict access to the affected API endpoints, such as "index.php", "arbo.php", "framepoint.php", "genpage.php", "lienvalider.php", "appreciation.php", "partenariat.php", "rechercher.php", "projet.php", "propoexample.php", "refererpoint.php", or "top50.php", to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2006-4848

Affected Products

Hitweb

References · 6

• 🔥 http://securityfocus.com/bid/20060 · Exploit
• 🔥 https://exploit-db.com/exploits/28590 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-4848 · Security Note
• http://securityfocus.com/archive/1/446567/100/200/threaded · Note
• http://securityreason.com/securityalert/1590 · Note
• http://securityfocus.com/archive/1/446219/100/0/threaded · Note