PT-2006-4810

CVE-2006-3964

·

Published

2006-08-01

·

Updated

2016-10-18

Description by

CVSS 2.0
7.5
High
MetricsAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Banex PHP MySQL Banner Exchange version 2.21
Description The issue allows remote attackers to execute arbitrary PHP code via a URL in the cfg root parameter in the members.php file.
Recommendations For Banex PHP MySQL Banner Exchange version 2.21, consider restricting access to the members.php file or the cfg root parameter to minimize the risk of exploitation until a patch is available.
Exploitability
Exploit
Fix
Researchers
Vendors
Affected products
Related identifiers
CVE-2006-3964
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com