PT-2006-6647 · Extreme · Extreme Cms

Published 2006-11-20 · Updated 2011-03-08 · CVE-2006-5986

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Extreme CMS version 0.9 and possibly earlier

Description The issue allows remote attackers to conduct unauthorized activities due to a lack of authentication requirement in the admin/options.php file. This can potentially be combined with another vulnerability to expand the scope of a cross-site scripting (XSS) attack without authentication.

Recommendations For Extreme CMS version 0.9 and possibly earlier, consider implementing proper authentication mechanisms for the admin/options.php file to prevent unauthorized access. As a temporary workaround, restrict access to the admin/options.php file until a proper fix is applied.

Fix

Related Identifiers

CVE-2006-5986

Affected Products

Extreme Cms

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2006-5986 · Security Note
• http://secunia.com/advisories/22919 · Vendor Advisory
• http://vupen.com/english/advisories/2006/4529 · Note