CVE-2006-4754

Cross-site scripting (XSS) vulnerability in index.php in PHProg before 1.1 allows remote attackers to inject arbitrary web script or HTML via the album parameter, which is used in an opendir call. NOTE: the same primary issue can be used for full path disclosure with an invalid parameter that reveals the installation path in an error message.

CVSS v2.0 6.8 MEDIUM

6.8^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability : 8.6 / Impact : 6.4

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://marc.info/?l=full-disclosure&m=115796646100433&w=2
http://secunia.com/advisories/21849	Exploit Patch Vendor Advisory
http://www.comscripts.com/scripts/php.phprog-album-photo-php.2117.html	Patch
http://www.pconfig.com/cdg393/adviso/PHProg.txt	Exploit Vendor Advisory URL Repurposed
http://www.securityfocus.com/bid/19957	Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/28845
https://exchange.xforce.ibmcloud.com/vulnerabilities/28846

Configurations

Configuration 1 (hide)

cpe:2.3:a:comscripts:phprog:1.0:*:*:*:*:*:*:*

History

No history.

Information

Published : 2006-09-13 22:07

Updated : 2024-02-14 01:17

NVD link : CVE-2006-4754

Mitre link : CVE-2006-4754

CVE.ORG link : CVE-2006-4754

JSON object : View

Products Affected

comscripts

phprog

CWE

NVD-CWE-Other

{"id": "CVE-2006-4754", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": true, "userInteractionRequired": false}]}, "published": "2006-09-13T22:07:00.000", "references": [{"url": "http://marc.info/?l=full-disclosure&m=115796646100433&w=2", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/21849", "tags": ["Exploit", "Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.comscripts.com/scripts/php.phprog-album-photo-php.2117.html", "tags": ["Patch"], "source": "cve@mitre.org"}, {"url": "http://www.pconfig.com/cdg393/adviso/PHProg.txt", "tags": ["Exploit", "Vendor Advisory", "URL Repurposed"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/19957", "tags": ["Exploit"], "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28845", "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28846", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Cross-site scripting (XSS) vulnerability in index.php in PHProg before 1.1 allows remote attackers to inject arbitrary web script or HTML via the album parameter, which is used in an opendir call. NOTE: the same primary issue can be used for full path disclosure with an invalid parameter that reveals the installation path in an error message."}, {"lang": "es", "value": "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en index.php en PHProg anterior a 1.1, permite a un atacante remoto inyectar secuencias de comandos web o HTML de su elecci\u00f3n a trav\u00e9s del par\u00e1metro album, el cual se usa en una llamada a opendir. NOTA: la misma publicaci\u00f3n primaria se puede utilizar para el acceso completo de la trayectoria con un par\u00e1metro no v\u00e1lido que revele la ruta deinstalaci\u00f3n en un mensaje de error."}], "lastModified": "2024-02-14T01:17:43.863", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:comscripts:phprog:1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "873263FF-913C-4A86-AEF2-D85BF3685406"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org", "evaluatorSolution": "This vulnerability is addressed in the following product release:\r\nComScripts, PHProg, 1.1"}