PT-2006-5875 · Groupee · Groupee Ubb.Threads

Hackers Pal · Published 2006-10-02 · Updated 2018-10-17 · CVE-2006-5137

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Medium

Base vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Groupee UBB.threads version 6.5.1.1

Description The issue concerns multiple direct static code injection vulnerabilities. These vulnerabilities allow remote attackers to inject PHP code via specific parameters, including the theme[] array parameter to "admin/doedittheme.php", which is then injected into "includes/theme.inc.php", and the config[] array parameter to "admin/doeditconfig.php", with execution via "includes/config.inc.php". Additionally, attackers can inject a reference to PHP code via a URL in the config[path] parameter and execute it through various scripts, including "dorateuser.php" and "calendar.php".

Recommendations For Groupee UBB.threads version 6.5.1.1, consider disabling access to the "admin/doedittheme.php" and "admin/doeditconfig.php" scripts until a patch is available. Restrict the use of the theme[] and config[] array parameters to minimize the risk of exploitation. Avoid using the config[path] parameter with untrusted input in scripts like "dorateuser.php" and "calendar.php" to prevent code execution.

Exploit

Fix

Related Identifiers

CVE-2006-5137

Affected Products

Groupee Ubb.Threads

References · 6

• 🔥 http://securityfocus.com/bid/20266 · Exploit
• 🔥 https://exploit-db.com/exploits/2457 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-5137 · Security Note
• http://securityfocus.com/archive/1/447359/100/0/threaded · Note
• http://securityreason.com/securityalert/1676 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/29274 · Note