PT-2006-5851 · Exporia · Exporia

Published 2006-10-02 · Updated 2017-07-20 · CVE-2006-5113

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Exporia version 0.3.0

Description A directory traversal issue exists, allowing remote attackers to include and execute local files. This is achieved by providing a .. (dot dot) in the lan parameter to the "includes.php" endpoint.

Recommendations For Exporia version 0.3.0, consider restricting access to the "includes.php" endpoint to minimize the risk of exploitation. Avoid using the lan parameter in the affected endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2006-5113

Affected Products

Exporia

References · 6

• http://secunia.com/advisories/22146 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-5113 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/29326 · Note
• http://osvdb.org/29218 · Note
• http://vupen.com/english/advisories/2006/3799 · Note
• http://packetstormsecurity.org/0610-exploits/Exporia-0.3.0.txt · Note