PT-2006-6024 · Unknown · Redaction System

R0Ut3R · Published 2006-10-17 · Updated 2017-10-19 · CVE-2006-5302

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Redaction System version 1.0000

Description The issue allows remote attackers to execute arbitrary PHP code via a URL in specific parameters. This can be achieved by manipulating the lang prefix parameter in the following API endpoints: "conn.php", "sesscheck.php", "wap/conn.php", or "wap/sesscheck.php", or the lang parameter in the "index.php" endpoint.

Recommendations For Redaction System version 1.0000, consider disabling the lang prefix and lang parameters in the affected API endpoints until a patch is available. Restrict access to the vulnerable endpoints "conn.php", "sesscheck.php", "wap/conn.php", "wap/sesscheck.php", and "index.php" to minimize the risk of exploitation. Avoid using the lang prefix and lang parameters in these endpoints until the issue is resolved.

Exploit

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2006-5302

Affected Products

Redaction System

References · 13

• 🔥 https://exploit-db.com/exploits/2534 · Exploit
• http://secunia.com/advisories/22347 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-5302 · Security Note
• http://vupen.com/english/advisories/2006/4024 · Vendor Advisory
• http://redactionsystem.sourceforge.net/index.php?m=news&id=5 · Note
• http://securityfocus.com/bid/20499 · Note
• http://osvdb.org/29701 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/29504 · Note
• http://osvdb.org/29703 · Note
• http://osvdb.org/29704 · Note
• http://osvdb.org/29702 · Note
• http://osvdb.org/29700 · Note
• http://redactionsystem.sourceforge.net/index.php?m=news&id=2 · Note