PT-2006-6232 · Unknown · Rhode Island Open Meetings Filing Application

Mehmet Ince

+1

·

CVE-2006-5517

·

Publicado

2006-10-26

·

Atualizado

2018-10-17

CVSS v2.0

7.5

Alta

VetorAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Rhode Island Open Meetings Filing Application (OMFA) (affected versions not specified)
Description The issue allows remote attackers to execute arbitrary PHP code via a URL in the PROJECT ROOT parameter to several API endpoints: "editmeetings/session.php", "email/session.php", "entityproperties/session.php", or "inc/mail.php".
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Code Injection

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2006-5517

Produtos afetados

Rhode Island Open Meetings Filing Application