PT-2007-1361 · Rigter · Rigter Portal System

0O_Zeus_O0 · Published 2007-02-27 · Updated 2017-07-29 · CVE-2006-7082

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Rigter Portal System (RPS) versions 1.0 through 3.0

Description The issue allows remote attackers to bypass authentication and upload arbitrary files. This can be achieved via direct requests to API endpoints such as "adm/photos/images.php" and "adm/down/files.php".

Recommendations For versions 1.0 through 3.0, restrict access to the "adm/photos/images.php" and "adm/down/files.php" API endpoints to prevent unauthorized file uploads. Consider implementing proper authentication mechanisms to prevent bypass attacks.

Exploit

Fix

Related Identifiers

CVE-2006-7082

Affected Products

Rigter Portal System

References · 6

• 🔥 http://lists.grok.org.uk/pipermail/full-disclosure/2006-July/048006.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-7082 · Security Note
• http://osvdb.org/28637 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27873 · Note
• http://securityreason.com/securityalert/2322 · Note
• http://osvdb.org/28638 · Note