PT-2006-6140 · Wsn · Wsn Forum

Kacper · Published 2006-10-20 · Updated 2017-10-19 · CVE-2006-5421

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions WSN Forum versions 1.3.4 and earlier

Description The issue allows remote attackers to execute arbitrary PHP code by modifying the pathname in the pathtoconfig parameter to point to an avatar image containing PHP code. This code is then accessed from prestart.php. It's worth noting that while this issue has been associated with remote file inclusion in the context of an attack, the underlying problem is distinct from this classification.

Recommendations For WSN Forum versions 1.3.4 and earlier, consider restricting access to the prestart.php file and limiting the ability to modify the pathtoconfig parameter to prevent arbitrary PHP code execution until a fix is available. Additionally, as a temporary workaround, avoid using the pathtoconfig parameter to reference avatar images that could contain PHP code. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2006-5421

Affected Products

Wsn Forum

References · 7

• 🔥 https://exploit-db.com/exploits/2583 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-5421 · Security Note
• http://secunia.com/advisories/22360 · Vendor Advisory
• http://vupen.com/english/advisories/2006/4081 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/29635 · Note
• http://securityfocus.com/bid/20586 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5421 · Note