Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2006-1087

Quick assessment

Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

PHP-Stats 0.1.9.1及其早期版本的admin.php，其modify_config操作中存在直接静态代码注入漏洞，远程经过身份验证的管理员可以通过option_new[compatibility_mode] 参数(在存储到config.php中前未经过滤)执行任意PHP码。 注意：该漏洞会被远程未经身份验证的攻击者，通过选项[admin_pass] 身份验证绕过漏洞加以利用。

AI Predicted 8.1 Difficulty: Easy EPSS 1.74% · P76
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2006-1087

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Direct static code injection vulnerability in the modify_config action in admin.php for PHP-Stats 0.1.9.1 and earlier allows remote authenticated administrators to execute arbitrary PHP code via the option_new[compatibility_mode] parameter, which is not filtered before being stored in config.php. NOTE: this vulnerability can be exploited by remote unauthenticated attackers in conjunction with the option[admin_pass] authentication bypass vulnerability.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
PHP-Stats 'admin.php'直接静态代码注入漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
PHP-Stats 0.1.9.1及其早期版本的admin.php，其modify_config操作中存在直接静态代码注入漏洞，远程经过身份验证的管理员可以通过option_new[compatibility_mode] 参数(在存储到config.php中前未经过滤)执行任意PHP码。 注意：该漏洞会被远程未经身份验证的攻击者，通过选项[admin_pass] 身份验证绕过漏洞加以利用。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
- n/a n/a -

II. Public POCs for CVE-2006-1087

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2006-1087

请登录查看更多情报信息。

Vendor Advisories for CVE-2006-1087 (6)

Other References for CVE-2006-1087 (2)

Same Patch Batch · n/a · 2006-03-09 · 58 CVEs total

CVE-2006-1111 Aztek Forum HTML注入漏洞
CVE-2006-1122 D2KBlog 'Default.asp'跨站脚本攻击漏洞
CVE-2006-1125 AVG Anti-Virus本地不安全权限设置漏洞
CVE-2006-1124 RevilloC MailServer远程缓冲区溢出漏洞
CVE-2006-1123 D2KBlog多个SQL注入漏洞
CVE-2006-1126 Gallery X-Forwarded-For HTTP头进行IP地址欺骗漏洞
CVE-2006-1115 nCipher Diffie-Hellman以不安全方式生成密钥漏洞
CVE-2006-1114 Loudblog多个输入验证漏洞
CVE-2006-1113 Loudblog 'podcast.php'SQL注入漏洞
CVE-2006-1112 Aztek Forum HTML注入漏洞
CVE-2006-1116 nCipher非安全CBC-MAC API漏洞
CVE-2006-1110 Aztek Forum 跨站脚本攻击漏洞
CVE-2006-1109 TotalECommerce 'index.asp' SQL注入漏洞
CVE-2006-1108 NMDeluxe 'News.PHP'多个输入验证漏洞
CVE-2006-1107 NMDeluxe 'News.PHP'跨站脚本攻击漏洞
CVE-2006-1106 Pixelpost多个输入验证漏洞
CVE-2006-1105 Pixelpost includes/phpinfo.php多个输入验证漏洞
CVE-2006-1104 Pixelpost多个输入验证漏洞
CVE-2006-1103 Sauerbraten 'engine/server.cpp'多个远程漏洞
CVE-2006-1102 Sauerbraten多个远程漏洞

Showing top 20 of 58 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2006-1087

No comments yet

Leave a comment