CVE-2006-3531

Description

includes/editor/insert_image.php in Pivot 1.30 RC2 and earlier creates the authentication credentials from parameters, which allows remote attackers to obtain privileges and upload arbitrary files via modified (1) pass and (2) session parameters, and (3) pass and (4) userlevel indices of the (a) Pivot_Vars[] or (b) Users[] array parameters.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/27671

http://www.vupen.com/english/advisories/2006/2744

http://www.securityfocus.com/archive/1/439495/100/0/threaded

http://www.osvdb.org/27126

http://securityreason.com/securityalert/1214

http://secunia.com/advisories/20962

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS