CVE-2006-3208

Direct static code injection vulnerability in Ultimate PHP Board (UPB) 1.9.6 and earlier allows remote authenticated administrators to execute arbitrary PHP code via multiple unspecified "configuration fields" in (1) admin_chatconfig.php, (2) admin_configcss.php, (3) admin_config.php, or (4) admin_config2.php, which are stored as configuration settings. NOTE: this issue can be exploited by remote attackers by leveraging other vulnerabilities in UPB.

CVSS v2.0 6.5 MEDIUM

6.5^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:S/C:P/I:P/A:P

Exploitability : 8.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication SINGLE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://securityreason.com/securityalert/1138
http://www.kliconsulting.com/users/mbrooks/UPB_0-day.txt	Exploit URL Repurposed
http://www.securityfocus.com/archive/1/437875/100/0/threaded

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:ultimate_php_board:ultimate_php_board:1.8:::::::*
	cpe:2.3:a:ultimate_php_board:ultimate_php_board:1.8.2:::::::*
	cpe:2.3:a:ultimate_php_board:ultimate_php_board:1.9:::::::*
	cpe:2.3:a:ultimate_php_board:ultimate_php_board:1.9.6:::::::*

History

14 Feb 2024, 01:17

Type	Values Removed	Values Added
References	~~() http://www.kliconsulting.com/users/mbrooks/UPB_0-day.txt - Exploit~~	() http://www.kliconsulting.com/users/mbrooks/UPB_0-day.txt - Exploit, URL Repurposed

Information

Published : 2006-06-24 01:06

Updated : 2024-02-14 01:17

NVD link : CVE-2006-3208

Mitre link : CVE-2006-3208

CVE.ORG link : CVE-2006-3208

JSON object : View

Products Affected

ultimate_php_board

ultimate_php_board

CWE

NVD-CWE-Other

{"id": "CVE-2006-3208", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P", "authentication": "SINGLE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": true, "userInteractionRequired": false}]}, "published": "2006-06-24T01:06:00.000", "references": [{"url": "http://securityreason.com/securityalert/1138", "source": "cve@mitre.org"}, {"url": "http://www.kliconsulting.com/users/mbrooks/UPB_0-day.txt", "tags": ["Exploit", "URL Repurposed"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/archive/1/437875/100/0/threaded", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Direct static code injection vulnerability in Ultimate PHP Board (UPB) 1.9.6 and earlier allows remote authenticated administrators to execute arbitrary PHP code via multiple unspecified \"configuration fields\" in (1) admin_chatconfig.php, (2) admin_configcss.php, (3) admin_config.php, or (4) admin_config2.php, which are stored as configuration settings. NOTE: this issue can be exploited by remote attackers by leveraging other vulnerabilities in UPB."}, {"lang": "es", "value": "Vulnerabilidad de inyecci\u00f3n directa de c\u00f3digo est\u00e1tico en Ultimate PHP Board (UPB) v1.9.6 y anteriores permite a administradores autenticados remotamente ejecutar c\u00f3digo PHP de su elecci\u00f3n a atrav\u00e9s de m\u00faltiples \"campos de comfiguraci\u00f3n\" sin especificar en (1) admin_chatconfig.php, (2) admin_configcss.php, (3) admin_config.php, o (4) admin_config2.php, que son almacenados como par\u00e1metros de configuraci\u00f3n NOTA: este caso puede ser explotado por atacantes remotos aprovechando otras vulnerabilidades en UPB."}], "lastModified": "2024-02-14T01:17:43.863", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ultimate_php_board:ultimate_php_board:1.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8EC70A25-AB74-4088-BB10-3B7748E70EA0"}, {"criteria": "cpe:2.3:a:ultimate_php_board:ultimate_php_board:1.8.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "53E41185-4834-4D85-AF2D-7F10AA98481D"}, {"criteria": "cpe:2.3:a:ultimate_php_board:ultimate_php_board:1.9:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "76565865-21E3-4007-8624-48FDC000EBF3"}, {"criteria": "cpe:2.3:a:ultimate_php_board:ultimate_php_board:1.9.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7869B748-3898-44CA-BA28-B81491241043"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}