PT-2006-6843 · Pegames · Pegames

Dr.Pantagon · Published 2006-12-01 · Updated 2017-10-19 · CVE-2006-6213

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions PEGames (affected versions not specified)

Description The issue allows remote attackers to conduct PHP remote file inclusion attacks. This is possible because the index.php file in PEGames uses the extract function, which overwrites critical variables. The abs url parameter is used in this attack, and it is later extracted to overwrite a previously uncontrolled value.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2006-6213

Affected Products

Pegames

References · 5

• 🔥 http://attrition.org/pipermail/vim/2006-November/001153.html · Exploit
• 🔥 https://exploit-db.com/exploits/2840 · Exploit
• 🔥 http://securityfocus.com/bid/21266 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-6213 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/30517 · Note