PT-2006-6572 · Web Directory Pro · Web Directory Pro

Hack2Prison · Published 2006-11-15 · Updated 2018-10-17 · CVE-2006-5905

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Web Directory Pro (affected versions not specified)

Description The issue allows remote attackers to perform certain actions without proper authorization. This includes the ability to backup the database by making a direct request to "admin/backup db.php" and modify configuration settings via a direct request to "admin/options.php".

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2006-5905

Affected Products

Web Directory Pro

References · 6

• 🔥 https://exploit-db.com/exploits/8878 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-5905 · Security Note
• http://secunia.com/advisories/35327 · Note
• http://securityreason.com/securityalert/1859 · Note
• http://securityfocus.com/archive/1/450556/100/0/threaded · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/30009 · Note