PT-2006-6616 · Exo · Exophpdesk

Firewall · Published 2006-11-17 · Updated 2018-10-17 · CVE-2006-5951

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Exophpdesk version 1.2

Description The issue allows remote attackers to execute arbitrary PHP code via a URL in the lang file parameter in the pipe.php file.

Recommendations For Exophpdesk version 1.2, consider restricting access to the pipe.php file or validating the lang file parameter to prevent remote file inclusion attacks until a patch is available.

Exploit

Fix

Related Identifiers

CVE-2006-5951

Affected Products

Exophpdesk

References · 6

• 🔥 https://exploit-db.com/exploits/28967 · Exploit
• 🔥 http://securityfocus.com/bid/21003 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-5951 · Security Note
• http://securityfocus.com/archive/1/451308/100/0/threaded · Note
• http://securityreason.com/securityalert/1878 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/30208 · Note