← Zuruck zu CVEs

CVE-2006-3531

N/A

Beschreibung

includes/editor/insert_image.php in Pivot 1.30 RC2 and earlier creates the authentication credentials from parameters, which allows remote attackers to obtain privileges and upload arbitrary files via modified (1) pass and (2) session parameters, and (3) pass and (4) userlevel indices of the (a) Pivot_Vars[] or (b) Users[] array parameters.

CVE Details

CVSS v3.1 BewertungN/A

Veroffentlicht7/12/2006

Zuletzt geandert4/16/2026

Quellenvd

Honeypot-Sichtungen0

Betroffene Produkte

pivot:pivot

Referenzen

http://retrogod.altervista.org/pivot_130RC2_xpl.html(cve@mitre.org)

http://secunia.com/advisories/20962(cve@mitre.org)

http://securityreason.com/securityalert/1214(cve@mitre.org)

http://www.osvdb.org/27126(cve@mitre.org)

http://www.securityfocus.com/archive/1/439495/100/0/threaded(cve@mitre.org)

http://www.securityfocus.com/bid/18881(cve@mitre.org)

http://www.vupen.com/english/advisories/2006/2744(cve@mitre.org)

https://exchange.xforce.ibmcloud.com/vulnerabilities/27671(cve@mitre.org)

http://retrogod.altervista.org/pivot_130RC2_xpl.html(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/advisories/20962(af854a3a-2127-422b-91ae-364da2661108)

http://securityreason.com/securityalert/1214(af854a3a-2127-422b-91ae-364da2661108)

http://www.osvdb.org/27126(af854a3a-2127-422b-91ae-364da2661108)

http://www.securityfocus.com/archive/1/439495/100/0/threaded(af854a3a-2127-422b-91ae-364da2661108)

http://www.securityfocus.com/bid/18881(af854a3a-2127-422b-91ae-364da2661108)

http://www.vupen.com/english/advisories/2006/2744(af854a3a-2127-422b-91ae-364da2661108)

https://exchange.xforce.ibmcloud.com/vulnerabilities/27671(af854a3a-2127-422b-91ae-364da2661108)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.