PT-2006-5668 · Tekman · Tekman Portal

Fix Tr · Published 2006-09-21 · Updated 2017-10-19 · CVE-2006-4916

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Tekman Portal (TR) version 1.0

Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the uye id parameter in the "uye profil.asp" file.

Recommendations For Tekman Portal (TR) version 1.0, avoid using the uye id parameter in the vulnerable "uye profil.asp" file until the issue is resolved. Consider restricting access to this file to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2006-4916

Affected Products

Tekman Portal

References · 6

• 🔥 http://securityfocus.com/bid/20102 · Exploit
• 🔥 https://exploit-db.com/exploits/2395 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-4916 · Security Note
• http://vupen.com/english/advisories/2006/3717 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/29028 · Note
• http://secunia.com/advisories/22008 · Note