PT-2006-6808 · Neocrome · Neocrome Seditio

Mustafa Can Bjorn Ipekci + 1 · Published 2006-11-30 · Updated 2018-10-17 · CVE-2006-6177

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Neocrome Seditio versions 1.10 and earlier

Description The issue allows remote authenticated users to execute arbitrary SQL commands via a double-url-encoded id parameter to "users.php" that begins with a valid filename. This can be demonstrated by using a filename such as "default.gif" followed by an encoded NULL and ' (apostrophe) (%2500%2527).

Recommendations For Neocrome Seditio versions 1.10 and earlier, consider restricting access to the "users.php" endpoint until a fix is available, and avoid using the id parameter in this endpoint to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2006-6177

Affected Products

Neocrome Seditio

References · 11

• 🔥 https://exploit-db.com/exploits/2820 · Exploit
• 🔥 http://nukedx.com/?getxpl=52 · Exploit
• 🔥 http://nukedx.com/?viewdoc=52 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-6177 · Security Note
• http://secunia.com/advisories/23054 · Vendor Advisory
• http://securityfocus.com/archive/1/452269/100/100/threaded · Note
• http://neocrome.net/page.php?id=2233 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/30466 · Note
• http://securityreason.com/securityalert/1931 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6177 · Note
• http://vupen.com/english/advisories/2006/4668 · Note