Vulnerabilities > CVE-2006-4889 - Unspecified vulnerability in Telekorn Signkorn Guestbook 1.1/1.2
Attack vector
UNKNOWN Attack complexity
UNKNOWN Privileges required
UNKNOWN Confidentiality impact
UNKNOWN Integrity impact
UNKNOWN Availability impact
UNKNOWN telekorn
exploit available
Summary
Multiple PHP remote file inclusion vulnerabilities in Telekorn SignKorn Guestbook (SL) 1.3 and earlier, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the dir_path parameter in (1) index.php, (2) includes/functions.gb.php, (3) includes/functions.admin.php, (4) includes/admin.inc.php, (5) help.php, (6) smile.php, (7) entry.php; (8) adminhelp0.php, (9) adminhelp1.php, (10) adminhelp2.php, and (11) adminhelp3.php in (a) help/en and (b) help/de directories; and the (12) preview.php, (13) log.php, (14) index.php, (15) config.php, and (16) admin.php in the (c) admin directory, a different set of vectors than CVE-2006-4788.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 3 |
Exploit-Db
description Telekorn Signkorn Guestbook 1.x help/de/adminhelp3.php dir_path Parameter Remote File Inclusion. CVE-2006-4889. Webapps exploit for php platform id EDB-ID:28535 last seen 2016-02-03 modified 2006-09-12 published 2006-09-12 reporter ThE_LeO source https://www.exploit-db.com/download/28535/ title Telekorn Signkorn Guestbook 1.x help/de/adminhelp3.php dir_path Parameter Remote File Inclusion description Telekorn Signkorn Guestbook 1.x help/de/adminhelp2.php dir_path Parameter Remote File Inclusion. CVE-2006-4889. Webapps exploit for php platform id EDB-ID:28534 last seen 2016-02-03 modified 2006-09-12 published 2006-09-12 reporter ThE_LeO source https://www.exploit-db.com/download/28534/ title Telekorn Signkorn Guestbook 1.x help/de/adminhelp2.php dir_path Parameter Remote File Inclusion description Telekorn Signkorn Guestbook 1.x smile.php dir_path Parameter Remote File Inclusion. CVE-2006-4889. Webapps exploit for php platform id EDB-ID:28527 last seen 2016-02-03 modified 2006-09-12 published 2006-09-12 reporter ThE_LeO source https://www.exploit-db.com/download/28527/ title Telekorn Signkorn Guestbook 1.x smile.php dir_path Parameter Remote File Inclusion description Telekorn Signkorn Guestbook 1.x admin/index.php dir_path Parameter Remote File Inclusion. CVE-2006-4889 . Webapps exploit for php platform id EDB-ID:28539 last seen 2016-02-03 modified 2006-09-12 published 2006-09-12 reporter ThE_LeO source https://www.exploit-db.com/download/28539/ title Telekorn Signkorn Guestbook 1.x admin/index.php dir_path Parameter Remote File Inclusion description Telekorn Signkorn Guestbook 1.x admin/admin.php dir_path Parameter Remote File Inclusion. CVE-2006-4889. Webapps exploit for php platform id EDB-ID:28541 last seen 2016-02-03 modified 2006-09-12 published 2006-09-12 reporter ThE_LeO source https://www.exploit-db.com/download/28541/ title Telekorn Signkorn Guestbook 1.x admin/admin.php dir_path Parameter Remote File Inclusion description Telekorn Signkorn Guestbook 1.x admin/config.php dir_path Parameter Remote File Inclusion. CVE-2006-4889. Webapps exploit for php platform id EDB-ID:28540 last seen 2016-02-03 modified 2006-09-12 published 2006-09-12 reporter ThE_LeO source https://www.exploit-db.com/download/28540/ title Telekorn Signkorn Guestbook 1.x admin/config.php dir_path Parameter Remote File Inclusion description Telekorn Signkorn Guestbook 1.x help/en/adminhelp2.php dir_path Parameter Remote File Inclusion. CVE-2006-4889 . Webapps exploit for php platform id EDB-ID:28530 last seen 2016-02-03 modified 2006-09-12 published 2006-09-12 reporter ThE_LeO source https://www.exploit-db.com/download/28530/ title Telekorn Signkorn Guestbook 1.x help/en/adminhelp2.php dir_path Parameter Remote File Inclusion description Telekorn Signkorn Guestbook 1.x help/de/adminhelp0.php dir_path Parameter Remote File Inclusion. CVE-2006-4889. Webapps exploit for php platform id EDB-ID:28532 last seen 2016-02-03 modified 2006-09-12 published 2006-09-12 reporter ThE_LeO source https://www.exploit-db.com/download/28532/ title Telekorn Signkorn Guestbook 1.x help/de/adminhelp0.php dir_path Parameter Remote File Inclusion description Telekorn Signkorn Guestbook 1.x admin/preview.php dir_path Parameter Remote File Inclusion. CVE-2006-4889. Webapps exploit for php platform id EDB-ID:28537 last seen 2016-02-03 modified 2006-09-12 published 2006-09-12 reporter ThE_LeO source https://www.exploit-db.com/download/28537/ title Telekorn Signkorn Guestbook 1.x admin/preview.php dir_path Parameter Remote File Inclusion description Telekorn Signkorn Guestbook 1.x admin/log.php dir_path Parameter Remote File Inclusion. CVE-2006-4889. Webapps exploit for php platform id EDB-ID:28538 last seen 2016-02-03 modified 2006-09-12 published 2006-09-12 reporter ThE_LeO source https://www.exploit-db.com/download/28538/ title Telekorn Signkorn Guestbook 1.x admin/log.php dir_path Parameter Remote File Inclusion description Telekorn Signkorn Guestbook 1.x help/en/adminhelp3.php dir_path Parameter Remote File Inclusion. CVE-2006-4889. Webapps exploit for php platform id EDB-ID:28531 last seen 2016-02-03 modified 2006-09-12 published 2006-09-12 reporter ThE_LeO source https://www.exploit-db.com/download/28531/ title Telekorn Signkorn Guestbook 1.x help/en/adminhelp3.php dir_path Parameter Remote File Inclusion description Telekorn Signkorn Guestbook 1.x help.php dir_path Parameter Remote File Inclusion. CVE-2006-4889. Webapps exploit for php platform id EDB-ID:28526 last seen 2016-02-03 modified 2006-09-12 published 2006-09-12 reporter ThE_LeO source https://www.exploit-db.com/download/28526/ title Telekorn Signkorn Guestbook 1.x help.php dir_path Parameter Remote File Inclusion description Telekorn Signkorn Guestbook 1.x entry.php dir_path Parameter Remote File Inclusion. CVE-2006-4889 . Webapps exploit for php platform id EDB-ID:28536 last seen 2016-02-03 modified 2006-09-12 published 2006-09-12 reporter ThE_LeO source https://www.exploit-db.com/download/28536/ title Telekorn Signkorn Guestbook 1.x entry.php dir_path Parameter Remote File Inclusion description Signkorn Guestbook <= 1.3 (dir_path) Remote File Include Vulnerability. CVE-2006-4788,CVE-2006-4889. Webapps exploit for php platform file exploits/php/webapps/2354.txt id EDB-ID:2354 last seen 2016-01-31 modified 2006-09-12 platform php port published 2006-09-12 reporter SHiKaA source https://www.exploit-db.com/download/2354/ title Signkorn Guestbook <= 1.3 dir_path Remote File Include Vulnerability type webapps description Telekorn Signkorn Guestbook 1.x help/de/adminhelp1.php dir_path Parameter Remote File Inclusion. CVE-2006-4889 . Webapps exploit for php platform id EDB-ID:28533 last seen 2016-02-03 modified 2006-09-12 published 2006-09-12 reporter ThE_LeO source https://www.exploit-db.com/download/28533/ title Telekorn Signkorn Guestbook 1.x help/de/adminhelp1.php dir_path Parameter Remote File Inclusion description Telekorn Signkorn Guestbook 1.x includes/functions.admin.php dir_path Parameter Remote File Inclusion. CVE-2006-4889. Webapps exploit for php platform id EDB-ID:28524 last seen 2016-02-03 modified 2006-09-12 published 2006-09-12 reporter ThE_LeO source https://www.exploit-db.com/download/28524/ title Telekorn Signkorn Guestbook 1.x includes/functions.admin.php dir_path Parameter Remote File Inclusion description Telekorn Signkorn Guestbook 1.x includes/admin.inc.php dir_path Parameter Remote File Inclusion. CVE-2006-4889. Webapps exploit for php platform id EDB-ID:28525 last seen 2016-02-03 modified 2006-09-12 published 2006-09-12 reporter ThE_LeO source https://www.exploit-db.com/download/28525/ title Telekorn Signkorn Guestbook 1.x includes/admin.inc.php dir_path Parameter Remote File Inclusion description Telekorn Signkorn Guestbook 1.x includes/functions.gb.php dir_path Parameter Remote File Inclusion. CVE-2006-4889. Webapps exploit for php platform id EDB-ID:28523 last seen 2016-02-03 modified 2006-09-12 published 2006-09-12 reporter ThE_LeO source https://www.exploit-db.com/download/28523/ title Telekorn Signkorn Guestbook 1.x includes/functions.gb.php dir_path Parameter Remote File Inclusion description Telekorn Signkorn Guestbook 1.x index.php dir_path Parameter Remote File Inclusion. CVE-2006-4889. Webapps exploit for php platform id EDB-ID:28522 last seen 2016-02-03 modified 2006-09-12 published 2006-09-12 reporter ThE_LeO source https://www.exploit-db.com/download/28522/ title Telekorn Signkorn Guestbook 1.x index.php dir_path Parameter Remote File Inclusion description Telekorn Signkorn Guestbook 1.x help/en/adminhelp1.php dir_path Parameter Remote File Inclusion. CVE-2006-4889. Webapps exploit for php platform id EDB-ID:28529 last seen 2016-02-03 modified 2006-09-12 published 2006-09-12 reporter ThE_LeO source https://www.exploit-db.com/download/28529/ title Telekorn Signkorn Guestbook 1.x help/en/adminhelp1.php dir_path Parameter Remote File Inclusion description Telekorn Signkorn Guestbook 1.x help/en/adminhelp0.php dir_path Parameter Remote File Inclusion. CVE-2006-4889. Webapps exploit for php platform id EDB-ID:28528 last seen 2016-02-03 modified 2006-09-12 published 2006-09-12 reporter ThE_LeO source https://www.exploit-db.com/download/28528/ title Telekorn Signkorn Guestbook 1.x help/en/adminhelp0.php dir_path Parameter Remote File Inclusion
References
- http://www.telekorn.com/forum/showthread.php?t=1427
- http://www.securityfocus.com/bid/19977
- http://www.osvdb.org/32199
- http://www.osvdb.org/32200
- http://www.osvdb.org/32201
- http://www.osvdb.org/32202
- http://www.osvdb.org/32203
- http://www.osvdb.org/32204
- http://www.osvdb.org/32205
- http://www.osvdb.org/32206
- http://www.osvdb.org/32207
- http://www.osvdb.org/32208
- http://www.osvdb.org/32209
- http://www.osvdb.org/32210
- http://www.osvdb.org/32211
- http://www.osvdb.org/32212
- http://www.osvdb.org/32213
- http://www.osvdb.org/32214
- http://www.osvdb.org/32215
- http://www.osvdb.org/32216
- http://www.osvdb.org/32217
- http://www.osvdb.org/32218
- http://securityreason.com/securityalert/1619
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28888
- http://www.securityfocus.com/archive/1/446086/100/0/threaded