Vulnerabilities > CVE-2006-0845 - Unspecified vulnerability in Leif M. Wright web Blog 3.5

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
leif-m-wright
NVD
Published: 2006-02-22
Updated: 2024-11-21

Summary

Leif M. Wright's Blog 3.5 allows remote authenticated users with administrative privileges to execute arbitrary programs, including shell commands, by configuring the sendmail path to a malicious pathname.

Vulnerable Configurations

Part Description Count
Application
Leif_M._Wright
1

Packetstorm

data sourcehttps://packetstormsecurity.com/files/download/44315/EV0082.txt
idPACKETSTORM:44315
last seen2016-12-05
published2006-03-03
reporterAliaksandr Hartsuyeu
sourcehttps://packetstormsecurity.com/files/44315/EV0082.txt.html
titleEV0082.txt

References