PT-2006-6488 · Openemr · Openemr

Dedi Dwianto + 1 · Published 2006-11-08 · Updated 2018-10-17 · CVE-2006-5811

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: OpenEMR version 2.8.1

Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[srcdir] parameter in library/translation.inc.php, when register globals is enabled.

Recommendations: For OpenEMR version 2.8.1, consider disabling the register globals setting to prevent exploitation, and avoid using the GLOBALS[srcdir] parameter in the affected library/translation.inc.php file until a patch is available.

Exploit

Fix

Related Identifiers

CVE-2006-5811

Affected Products

Openemr

References · 9

• 🔥 https://exploit-db.com/exploits/2727 · Exploit
• 🔥 http://advisories.echo.or.id/adv/adv60-theday-2006.txt · Exploit
• http://secunia.com/advisories/22695 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-5811 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/30036 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5811 · Note
• http://securityreason.com/securityalert/1844 · Note
• http://vupen.com/english/advisories/2006/4382 · Note
• http://securityfocus.com/archive/1/450698/100/0/threaded · Note