CVEvulnerability
CVE-2006-3531
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2006-07-12
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
includes/editor/insert_image.php in Pivot 1.30 RC2 and earlier creates the authentication credentials from parameters, which allows remote attackers to obtain privileges and upload arbitrary files via modified (1) pass and (2) session parameters, and (3) pass and (4) userlevel indices of the (a) Pivot_Vars[] or (b) Users[] array parameters.
Affected configurations
• pivot pivot (<= 1.30 rc2)
References
- http://retrogod.altervista.org/pivot_130RC2_xpl.html Exploit
- http://secunia.com/advisories/20962 Vendor Advisory
- http://securityreason.com/securityalert/1214 securityreason.com
- http://www.osvdb.org/27126 www.osvdb.org
- http://www.securityfocus.com/archive/1/439495/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/18881 Exploit
- http://www.vupen.com/english/advisories/2006/2744 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27671 exchange.xforce.ibmcloud.com
- http://retrogod.altervista.org/pivot_130RC2_xpl.html Exploit
- http://secunia.com/advisories/20962 Vendor Advisory
- http://securityreason.com/securityalert/1214 securityreason.com
- http://www.osvdb.org/27126 www.osvdb.org
- http://www.securityfocus.com/archive/1/439495/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/18881 Exploit
- http://www.vupen.com/english/advisories/2006/2744 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27671 exchange.xforce.ibmcloud.com