Public exploit available

Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2006-5733

4 documents4 sources

Severity

7.5HIGH

EPSS

11.2%

top 6.50%

CISA KEV

Not in KEV

Exploit

PoC available

Public exploit / PoC exists

Affected products

Postnuke Software Foundation Postnuke

Timeline

PublishedNov 6

Latest updateMay 1

Description

Directory traversal vulnerability in error.php in PostNuke 0.763 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the PNSVlang (PNSV lang) cookie, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, which is then included by error.php.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages1 packages

▶NVDpostnuke_software_foundation/postnuke0.763+1

🔴Vulnerability Details

GHSA

GHSA-vmj3-wfpc-fxjg: Directory traversal vulnerability in error↗2022-05-01

▶

CVEList

CVE-2006-5733: Directory traversal vulnerability in error↗2006-11-06

▶

💥Exploits & PoCs

Exploit-DB

PostNuke 0.763 - 'PNSV lang' Remote Code Execution↗2006-11-03

▶