PT-2006-7371 · Irokez · Irokez Cms

Nuffsaid · Published 2006-12-27 · Updated 2017-10-19 · CVE-2006-6771

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Irokez CMS versions 0.7.1 and earlier

Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in certain parameters when register globals is enabled. This is possible through the GLOBALS[PTH][func] parameter in "scripts/gallery.scr.php", the GLOBALS[PTH][spaw] parameter in "scripts/xtextarea.scr.php", and the GLOBALS[PTH][classes] parameter in several other scripts, including "sitemap.scr.php", "news.scr.php", "polls.scr.php", "rss.scr.php", "search.scr.php" in the scripts directory, and various files in the functions directory.

Recommendations: For Irokez CMS versions 0.7.1 and earlier, consider disabling the register globals setting to prevent exploitation. Additionally, restrict access to the vulnerable parameters GLOBALS[PTH][func], GLOBALS[PTH][spaw], and GLOBALS[PTH][classes] in the affected scripts until a patch is available. Avoid using these parameters in the affected API endpoints until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2006-6771

Affected Products

Irokez Cms

References · 6

• 🔥 https://exploit-db.com/exploits/32823 · Exploit
• 🔥 http://securityfocus.com/bid/21769 · Exploit
• 🔥 http://secunia.com/advisories/23497 · Exploit
• 🔥 https://exploit-db.com/exploits/3007 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-6771 · Security Note
• http://vupen.com/english/advisories/2006/5178 · Note