PT-2006-5673
CVE-2006-4921
·
Publicado
2006-09-21
·
Atualizado
2016-10-18
Descrição por
CVSS 2.0
7.5
AltaMétricasAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
Site@School versions 2.4.03 and earlier
Description
A remote file inclusion issue allows remote attackers to execute arbitrary PHP code via a URL in the
cmsdir parameter to "starnet/modules/include/include.php".Recommendations
For versions 2.4.03 and earlier, consider restricting access to the
include.php file in the starnet/modules/include directory until a fix is available. Avoid using the cmsdir parameter in the affected API endpoint until the issue is resolved.Explorabilidade
Exploit
Correção
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾