PT-2006-4905 · Php · Phpprintanalyzer

CVE-2006-4061

·

Publicado

2006-08-10

·

Atualizado

2024-08-07

CVSS v2.0

7.5

Alta

VetorAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions phpPrintAnalyzer version 1.1
Description A remote file inclusion issue in index.php allows remote attackers to execute arbitrary PHP code when register globals is enabled. This is achieved via a URL in the rep par rapport racine parameter. However, it's noted that this issue has been disputed by third-party researchers, who claim that the rep par rapport racine variable is initialized before use.
Recommendations For phpPrintAnalyzer version 1.1, consider disabling the register globals setting to mitigate the risk of exploitation. As a temporary workaround, restrict access to the index.php file until a patch is available. Avoid using the rep par rapport racine parameter in the affected API endpoint until the issue is resolved.

Exploit

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Identificadores relacionados

CVE-2006-4061

Produtos afetados

Phpprintanalyzer