includes/editor/insert_image.php in Pivot 1.30 RC2 and earlier creates the authentication...
Vulnerability Description
includes/editor/insert_image.php in Pivot 1.30 RC2 and earlier creates the authentication credentials from parameters, which allows remote attackers to obtain privileges and upload arbitrary files via modified (1) pass and (2) session parameters, and (3) pass and (4) userlevel indices of the (a) Pivot_Vars[] or (b) Users[] array parameters.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2006-3531
Credits & Attribution
No credits recorded in the NVD database.
References
- http://www.securityfocus.com/archive/1/439495/100/0/threaded
- http://retrogod.altervista.org/pivot_130RC2_xpl.html
- http://www.vupen.com/english/advisories/2006/2744
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27671
- http://secunia.com/advisories/20962
- http://www.securityfocus.com/bid/18881
- http://securityreason.com/securityalert/1214
- http://www.osvdb.org/27126
More from pivot
View All →Affected Vendor
pivot
View all reports →Affected Software
Timeline
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.