Vulnerability Details : CVE-2006-4602
Public exploit exists!
Unrestricted file upload vulnerability in jhot.php in TikiWiki 1.9.4 Sirius and earlier allows remote attackers to execute arbitrary PHP code via a filepath parameter that contains a filename with a .php extension, which is uploaded to the img/wiki/ directory.
Products affected by CVE-2006-4602
- cpe:2.3:a:tiki:tikiwiki_cms\/groupware:1.9.4:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2006-4602
96.15%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 100 %
Percentile, the proportion of vulnerabilities that are scored at or less
Metasploit modules for CVE-2006-4602
-
TikiWiki jhot Remote Command Execution
Disclosure Date: 2006-09-02First seen: 2020-04-26exploit/unix/webapp/tikiwiki_jhot_execTikiWiki contains a flaw that may allow a malicious user to execute arbitrary PHP code. The issue is triggered due to the jhot.php script not correctly verifying uploaded files. It is possible that the flaw may allow arbitrary PHP code execution by uploading a mali
CVSS scores for CVE-2006-4602
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
7.5
|
HIGH | AV:N/AC:L/Au:N/C:P/I:P/A:P |
10.0
|
6.4
|
NIST |
References for CVE-2006-4602
-
http://tikiwiki.org/tiki-read_article.php?articleId=136
-
https://www.exploit-db.com/exploits/2288
-
http://security.gentoo.org/glsa/glsa-200609-16.xml
-
http://www.vupen.com/english/advisories/2006/3450
Vendor Advisory
-
http://www.securityfocus.com/bid/19819
TikiWiki Configure Script JHot.PHP Remote Command Execution VulnerabilityExploit
-
http://isc.sans.org/diary.php?storyid=1672
Jump to