Lumension® Endpoint Intelligence Center

Intelligence Center » Browse All Vulnerabilities » CVE-2006-1831

Overview

Vulnerability Score 7.5 7.5
CVE Id CVE-2006-1831
Last Modified 07 Mar 2011 09:34:22
Published 19 Apr 2006 12:06:00
Confidentiality Impact PARTIAL PARTIAL
Integrity Impact PARTIAL PARTIAL
Availability Impact PARTIAL PARTIAL
Access Vector NETWORK
Access Complexity LOW
Authentication NONE

CVE-2006-1831

Summary

Direct static code injection vulnerability in sysinfo.cgi in sysinfo 1.21 and possibly other versions before 2.25 allows remote attackers to execute arbitrary commands via a leading ; (semicolon) in the name parameter in a systemdoc action, which is injected into phpinfo.php.

Vulnerable Systems

Application

  • Coder-world Sysinfo 1.21


References

BID - 17523

XF - sysinfo-sysinfo-command-execution(25906)

VUPEN - ADV-2006-1360

SECUNIA - 19690

MILW0RM - 1677


Last Updated: 27 May 2016 10:42:14