Exponent CMS banner module PHP command execution
| exponent-banner-php-command-execution (25610) |  Medium Risk |
Description:
Exponent could allow a remote attacker to execute arbitrary commands on the system, caused by improper validation of user-supplied input by the banner module and the image functionality. A remote attacker could exploit this vulnerability to inject arbitrary PHP code and possibly execute arbitrary commands on the system with the privileges of the Web server process.
Consequences:
Gain Access
Remedy:
Upgrade to the latest version of Exponent CMS (0.96.5-RC1 or later) available from the SourceForge.net Downloads Web site. See References.
References:
- Exponent: An Open Source Content Management System: Exponent Open Source Content Management System.
- SourceForge.net: Files: Exponent Content Management System - File Release Notes and Changelog - Release Name: 0.96.5 - RC 1 (Goodyear).
- BID-17357: Exponent CMS Banner Module Arbitrary Script Execution Vulnerability
- CVE-2006-1604: Unspecified vulnerability in Exponent CMS before 0.96.5 RC 1 has unknown impact and remote attack vectors related to variables that are not typecasted.
- CVE-2006-1605: Unspecified vulnerability in the image module in Exponent CMS before 0.96.5 RC 1 allows remote attackers to execute arbitrary code via unknown vectors involving parsed PHP.
- CVE-2006-1606: Unspecified vulnerability in the image module in Exponent CMS before 0.96.5 RC 1 allows directory disclosure with unknown attack vectors.
- CVE-2006-1607: Unspecified vulnerability in the banner module in Exponent CMS before 0.96.5 RC 1 allows php injection via unknown attack vectors.
- OSVDB ID: 24358: Exponent CMS Banner and Image Module PHP Code Injection
- SA19498: Exponent CMS Unspecified PHP Code Injection Vulnerabilities
- VUPEN/ADV-2006-1201: Exponent CMS Multiple Remote PHP Command Execution Vulnerabilities
Platforms Affected:
- Exponent Exponent CMS prior to 0.96.5-RC1
Reported:
Apr 03, 2006
The information within this database may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the author/distributor (IBM Internet Security Systems X-Force) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.
For corrections or additions please email xforce@iss.net