medium5.4Public exploit code
CVE-2006-4782
src/index.php in WebSPELL 4.01.01 and earlier, when register_globals is enabled, allows remote attackers to bypass authentication and gain sensitive informatio…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- webSPELL 4.01.01 - Database Backup Download2006-09-12 · webapps · php · Verified
Impact
src/index.php in WebSPELL 4.01.01 and earlier, when register_globals is enabled, allows remote attackers to bypass authentication and gain sensitive information stored in the database via a modified userID parameter in a write action to admin/database.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Webspell | Webspell | through 4.01.01 Versions 4.0, 4.1, 4.1.1 |
References
- NVD record
- CVE.org record
- http://cms.webspell.org/index.php?site=files&file=15
- http://secunia.com/advisories/21881
- http://www.securityfocus.com/bid/19975
- http://www.vupen.com/english/advisories/2006/3572
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28896
- https://www.exploit-db.com/exploits/2352
- http://cms.webspell.org/index.php?site=files&file=15
- http://secunia.com/advisories/21881
- http://www.securityfocus.com/bid/19975
- http://www.vupen.com/english/advisories/2006/3572
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28896
- https://www.exploit-db.com/exploits/2352