PT-2006-6195 · Castor · Castor Php Web Builder

Kw3[R]Ln · Published 2006-10-24 · Updated 2017-10-19 · CVE-2006-5480

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Medium

Base vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Castor PHP Web Builder version 1.1.1

Description The issue allows remote attackers to execute arbitrary PHP code via the rootpath parameter in the lib/rs.php file.

Recommendations For Castor PHP Web Builder version 1.1.1, consider restricting access to the lib/rs.php file or avoiding the use of the rootpath parameter until a fix is available.

Exploit

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2006-5480

Affected Products

Castor Php Web Builder

References · 6

• 🔥 http://secunia.com/advisories/22527 · Exploit
• 🔥 https://exploit-db.com/exploits/2606 · Exploit
• 🔥 http://securityfocus.com/bid/20658 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-5480 · Security Note
• http://vupen.com/english/advisories/2006/4143 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/29704 · Note