PT-2007-7007 · Talkback · Talkback

Noge · Published 2007-11-23 · Updated 2018-10-15 · CVE-2007-6105

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions TalkBack version 2.2.7

Description The issue allows remote attackers to execute arbitrary PHP code via specific parameters in certain PHP files. This can be achieved by manipulating the language file parameter in files such as comments-display-tpl.php and addons/separate-comments-mod/my-comments-display-tpl.php, or the config[comments form tpl] parameter in comments-display-tpl.php.

Recommendations For TalkBack version 2.2.7, consider restricting access to the comments-display-tpl.php and addons/separate-comments-mod/my-comments-display-tpl.php files to minimize the risk of exploitation. Avoid using the language file and config[comments form tpl] parameters in the affected files until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2007-6105

Affected Products

Talkback

References · 12

• 🔥 https://exploit-db.com/exploits/4640 · Exploit
• http://secunia.com/advisories/27767 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-6105 · Security Note
• http://vupen.com/english/advisories/2007/3963 · Note
• http://osvdb.org/38816 · Note
• http://securityfocus.com/bid/26520 · Note
• http://scripts.oldguy.us/forums/index.php/topic%2C290.0.html · Note
• http://osvdb.org/38815 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/38596 · Note
• http://securityfocus.com/archive/1/484045/100/0/threaded · Note
• http://securityfocus.com/archive/1/485662/100/100/threaded · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/38597 · Note