Vulnerability Description
Directory traversal vulnerability in (1) initiate.php and (2) possibly other PHP scripts in Turnkey Web Tools PHP Live Helper 1.8, and possibly later versions, allows remote authenticated users to include and execute arbitrary local files via directory traversal sequences in the language cookie, as demonstrated by uploading PHP code in a gl_session cookie to users.php, which causes the code to be stored in error.log, which is then included by initiate.php.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Turnkey Web Tools | Php Live Helper | 1.8 |
References
- http://secunia.com/advisories/19428
- http://securityreason.com/securityalert/641
- http://www.securityfocus.com/archive/1/428976/100/0/threaded
- http://www.turnkeywebtools.com/forum/showthread.php?p=10415Patch
- http://www.worlddefacers.de/Public/WD-TMPLH.txtExploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25489
- http://secunia.com/advisories/19428
- http://securityreason.com/securityalert/641
- http://www.securityfocus.com/archive/1/428976/100/0/threaded
- http://www.turnkeywebtools.com/forum/showthread.php?p=10415Patch
- http://www.worlddefacers.de/Public/WD-TMPLH.txtExploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25489
FAQ
What is CVE-2006-1478?
CVE-2006-1478 is a vulnerability with a CVSS score of 7.5 (HIGH). Directory traversal vulnerability in (1) initiate.php and (2) possibly other PHP scripts in Turnkey Web Tools PHP Live Helper 1.8, and possibly later versions, allows remote authenticated users to inc...
How severe is CVE-2006-1478?
CVE-2006-1478 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2006-1478?
Check the references section above for vendor advisories and patch information. Affected products include: Turnkey Web Tools Php Live Helper.