CVE-2006-4609 File upload in n/a
Remote attackers can execute arbitrary PHP code via path_pre parameter in PHProjekt CMS when register_globals is enabled.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2006-4609?
CVE-2006-4609 is a medium-severity vulnerability in n/a, published on 7 Sep 2006. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Multiple PHP remote file inclusion vulnerabilities in the Content Management module ("Content manager") for PHProjekt 0.6.1, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via the path_pre parameter in (1) cm_lib.inc.php, (2) doc/br.edithelp.php, (3) doc/de.edithelp.php, (4) doc/ct.edithelp.php, (5) userrating.php, and (6) listing.php, a different set of vectors than CVE-2006-4204. NOTE: a third-party researcher has disputed the impact of the cm_lib.inc.php vector, stating that it is limited to local file inclusion. CVE analysis as of 20060905 concurs, although use of ftp URLs is also possible. The remaining five vectors have also been disputed by the same third party, stating that the path_pre variable is initialized before it is used
Which versions are affected by CVE-2006-4609?
It affects 1 product.
Products include Phpprojekt Phpprojekt.
How do I fix CVE-2006-4609?
No fix has been published for CVE-2006-4609 yet. Limit exposure of the affected software until one is available.
Is CVE-2006-4609 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2006-4609 exists.
Public exploit code: 1 Exploit-DB entry.
Other vulnerabilities in n/a
Sources
Also known as GHSA-g64v-qpxx-3cw6.