Vulnerabilities > CVE-2006-1022 - Remote PHP Script Code Injection vulnerability in Pehepe Membership Management System 3.0
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
NONE Integrity impact
PARTIAL Availability impact
NONE Summary
PHP remote file include vulnerability in sol_menu.php in PeHePe Uyelik Sistemi (aka PeHePe MemberShip Management System) 3 allows remote attackers to include and execute arbitrary PHP code via a URL in the uye_klasor parameter, along with a misafir[] parameter that is set to UYE_SEVIYE. This vulnerability affects PeHePe, Membership Management System (a.k.a Uyelik Sistemi) versions 3.0 and previous.
Vulnerable Configurations
Part | Description | Count |
---|---|---|
Application | 1 |
Exploit-Db
description | PEHEPE Membership Management System v3 Remote PHP Script Code Injection Vulnerability. CVE-2006-1022. Webapps exploit for php platform |
id | EDB-ID:27339 |
last seen | 2016-02-03 |
modified | 2006-02-28 |
published | 2006-02-28 |
reporter | Yunus Emre Yilmaz |
source | https://www.exploit-db.com/download/27339/ |
title | PEHEPE Membership Management System 3.0 - Remote PHP Script Code Injection Vulnerability |
References
- http://secunia.com/advisories/19055
- http://securityreason.com/securityalert/515
- http://www.osvdb.org/23567
- http://www.securityfocus.com/archive/1/426363/100/0/threaded
- http://www.securityfocus.com/bid/16887
- http://www.vupen.com/english/advisories/2006/0781
- http://yns.zaxaz.com/2006/02/28/pehepe-membership-management-system-multiple-vulnerabilities/
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24970