NVD

Id
62205  
Name
CVE-2006-3531  
Description
includes/editor/insert_image.php in Pivot 1.30 RC2 and earlier creates the authentication credentials from parameters, which allows remote attackers to obtain privileges and upload arbitrary files via modified (1) pass and (2) session parameters, and (3) pass and (4) userlevel indices of the (a) Pivot_Vars[] or (b) Users[] array parameters.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-07-12  
Modified Date
2011-03-07  
Seq
2006-3531  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
322268 62205 CVE-2006-3531 http://retrogod.altervista.org/pivot_130RC2_xpl.html  View
322269 62205 CVE-2006-3531 1214  View
322270 62205 CVE-2006-3531 20060707 Pivot <=1.30rc2 privilege escalation / remote commands execution  View
322271 62205 CVE-2006-3531 18881  View
322272 62205 CVE-2006-3531 ADV-2006-2744  View
322273 62205 CVE-2006-3531 pivot-insertimage-file-upload(27671)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
60466 JVNDB-2006-002732 Pivot の includes/editor/insert_image.php における任意のファイルをアップロードされる脆弱性 Pivot の includes/editor/insert_image.php には、権限を取得される、および任意のファイルをアップロードされる脆弱性が存在します。 CVE-2006-3531 19633 CVE-2006-3531 62205 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-002732.html 2006-07-12 2012-12-20 View