high7.5Public exploit code
CVE-2006-5597
join.asp in MiniHTTP Web Forum & File Server PowerPack 4.0 allows remote attackers to add or modify arbitrary user accounts via modified (1) frmMailBox and (2)…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- MiniHTTPServer Web Forum & File Sharing Server 4.0 - Add User2006-10-25 · remote · windows · Verified
Impact
join.asp in MiniHTTP Web Forum & File Server PowerPack 4.0 allows remote attackers to add or modify arbitrary user accounts via modified (1) frmMailBox and (2) frmUserPass parameters.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Minihttp | Web Forum File Sharing Sever Powerpack | Version 4.0 |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/22568
- http://www.securityfocus.com/bid/20743
- http://www.vupen.com/english/advisories/2006/4217
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29826
- https://www.exploit-db.com/exploits/2651
- http://secunia.com/advisories/22568
- http://www.securityfocus.com/bid/20743
- http://www.vupen.com/english/advisories/2006/4217
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29826
- https://www.exploit-db.com/exploits/2651