PT-2006-5869 · Ph03Y3Nk · Ph03Y3Nk Just Another Flat File (Jaf) Cms

Nanoymaster · Published 2006-10-02 · Updated 2018-10-17 · CVE-2006-5131

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions ph03y3nk just another flat file (JAF) CMS version 4.0 RC1

Description The issue allows remote attackers to execute arbitrary code within sections bounded by "", possibly due to a static code injection vulnerability involving admin/data inc.php.

Recommendations For ph03y3nk just another flat file (JAF) CMS version 4.0 RC1, consider restricting access to the module/shout/jafshout.php file and the admin/data inc.php script until a patch is available. As a temporary workaround, restrict the execution of code within sections bounded by "". At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2006-5131

Affected Products

Ph03Y3Nk Just Another Flat File (Jaf) Cms

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2006-5131 · Security Note
• http://secunia.com/advisories/22143 · Vendor Advisory
• http://securityreason.com/securityalert/1674 · Note
• http://securityfocus.com/archive/1/447081/100/0/threaded · Note