PT-2007-1380 · Phpburningportal · Phpburningportal Quiz-Modul

R0Ut3R · Published 2007-03-03 · Updated 2017-10-11 · CVE-2006-7102

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions phpBurningPortal quiz-modul version 1.0.1 and possibly earlier

Description The issue allows remote attackers to execute arbitrary PHP code via a URL in the lang path parameter to specific PHP files, including "quest delete.php", "quest edit.php", or "quest news.php".

Recommendations For phpBurningPortal quiz-modul version 1.0.1 and possibly earlier, consider restricting access to the lang path parameter in the affected PHP files until a patch is available. As a temporary workaround, avoid using the lang path parameter in the "quest delete.php", "quest edit.php", and "quest news.php" files to minimize the risk of exploitation.

Exploit

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2006-7102

Affected Products

Phpburningportal Quiz-Modul

References · 4

• 🔥 http://securityfocus.com/bid/20547 · Exploit
• 🔥 https://exploit-db.com/exploits/2563 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-7102 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/29558 · Note