medium6.8Public exploit code
CVE-2008-6793
The get_file_type function in lib/file_content.php in DFLabs PTK 0.1, 0.2, and 1.0 allows remote attackers to execute arbitrary commands via shell metacharacte…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- DFLabs PTK 1.0 - Local Command Execution2008-11-05 · webapps · php · Verified
Impact
The get_file_type function in lib/file_content.php in DFLabs PTK 0.1, 0.2, and 1.0 allows remote attackers to execute arbitrary commands via shell metacharacters after an arg1= sequence in a filename within a forensic image.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dflabs | Ptk | Versions 0.1, 0.2, 1.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/49574
- http://secunia.com/advisories/32553
- http://www.ikkisoft.com/stuff/LC-2008-07.txt
- http://www.securityfocus.com/archive/1/498081/100/0/threaded
- http://www.securityfocus.com/bid/32128
- http://www.vupen.com/english/advisories/2008/3020
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46380
- https://www.exploit-db.com/exploits/7001
- http://osvdb.org/49574
- http://secunia.com/advisories/32553
- http://www.ikkisoft.com/stuff/LC-2008-07.txt
- http://www.securityfocus.com/archive/1/498081/100/0/threaded
- http://www.securityfocus.com/bid/32128
- http://www.vupen.com/english/advisories/2008/3020
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46380
- https://www.exploit-db.com/exploits/7001