high7.5Public exploit code
CVE-2006-4913
Directory traversal vulnerability in chat/getStartOptions.php in AlstraSoft E-friends 4.85 allows remote attackers to include arbitrary local files and possibl…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Alstrasoft e-Friends 4.85 - Remote Command Execution2006-09-18 · webapps · php · Verified
Impact
Directory traversal vulnerability in chat/getStartOptions.php in AlstraSoft E-friends 4.85 allows remote attackers to include arbitrary local files and possibly execute arbitrary code via a .. (dot dot) sequence and trailing null (%00) byte in the lang parameter, as demonstrated by injecting PHP code into a log file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Alstrasoft | E-Friends | Version 4.85 |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/21961
- http://www.securityfocus.com/bid/20088
- http://www.vupen.com/english/advisories/2006/3684
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29006
- https://www.exploit-db.com/exploits/2389
- http://secunia.com/advisories/21961
- http://www.securityfocus.com/bid/20088
- http://www.vupen.com/english/advisories/2006/3684
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29006
- https://www.exploit-db.com/exploits/2389