PT-2006-6345 · Unknown · Faq Administrator

V1Per-Hacker · Published 2006-11-01 · Updated 2017-10-19 · CVE-2006-5637

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Faq Administrator version 2.1b

Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the email parameter in the faq reply.php file.

Recommendations: For Faq Administrator version 2.1b, consider restricting access to the faq reply.php file or validating and sanitizing the email parameter to prevent remote file inclusion attacks.

Exploit

Fix

Related Identifiers

CVE-2006-5637

Affected Products

Faq Administrator

References · 8

• 🔥 http://securityfocus.com/bid/20796 · Exploit
• 🔥 http://attrition.org/pipermail/vim/2006-October/001100.html · Exploit
• 🔥 https://exploit-db.com/exploits/2678 · Exploit
• http://secunia.com/advisories/22621 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-5637 · Security Note
• http://vupen.com/english/advisories/2006/4254 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/29868 · Note
• http://osvdb.org/30115 · Note