FKIE_CVE-2006-4754

Vulnerability from fkie_nvd - Published: 2006-09-13 22:07 - Updated: 2025-04-03 01:03
Severity ?
Summary
Cross-site scripting (XSS) vulnerability in index.php in PHProg before 1.1 allows remote attackers to inject arbitrary web script or HTML via the album parameter, which is used in an opendir call. NOTE: the same primary issue can be used for full path disclosure with an invalid parameter that reveals the installation path in an error message.
References
cve@mitre.orghttp://marc.info/?l=full-disclosure&m=115796646100433&w=2
cve@mitre.orghttp://secunia.com/advisories/21849Exploit, Patch, Vendor Advisory
cve@mitre.orghttp://www.comscripts.com/scripts/php.phprog-album-photo-php.2117.htmlPatch
cve@mitre.orghttp://www.pconfig.com/cdg393/adviso/PHProg.txtExploit, Vendor Advisory, URL Repurposed
cve@mitre.orghttp://www.securityfocus.com/bid/19957Exploit
cve@mitre.orghttps://exchange.xforce.ibmcloud.com/vulnerabilities/28845
cve@mitre.orghttps://exchange.xforce.ibmcloud.com/vulnerabilities/28846
af854a3a-2127-422b-91ae-364da2661108http://marc.info/?l=full-disclosure&m=115796646100433&w=2
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/21849Exploit, Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://www.comscripts.com/scripts/php.phprog-album-photo-php.2117.htmlPatch
af854a3a-2127-422b-91ae-364da2661108http://www.pconfig.com/cdg393/adviso/PHProg.txtExploit, Vendor Advisory, URL Repurposed
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/19957Exploit
af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/28845
af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/28846
Impacted products
Vendor Product Version
comscripts phprog 1.0
To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:comscripts:phprog:1.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "873263FF-913C-4A86-AEF2-D85BF3685406",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Cross-site scripting (XSS) vulnerability in index.php in PHProg before 1.1 allows remote attackers to inject arbitrary web script or HTML via the album parameter, which is used in an opendir call.  NOTE: the same primary issue can be used for full path disclosure with an invalid parameter that reveals the installation path in an error message."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en index.php en PHProg anterior a 1.1, permite a un atacante remoto inyectar secuencias de comandos web o HTML de su elecci\u00f3n a trav\u00e9s del par\u00e1metro album, el cual se usa en una llamada a opendir. NOTA: la misma publicaci\u00f3n primaria se puede utilizar para el acceso completo de la trayectoria con un par\u00e1metro no v\u00e1lido que revele la ruta deinstalaci\u00f3n en un mensaje de error."
    }
  ],
  "evaluatorSolution": "This vulnerability is addressed in the following product release:\r\nComScripts, PHProg, 1.1",
  "id": "CVE-2006-4754",
  "lastModified": "2025-04-03T01:03:51.193",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "MEDIUM",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 6.8,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 8.6,
        "impactScore": 6.4,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": true,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2006-09-13T22:07:00.000",
  "references": [
    {
      "source": "cve@mitre.org",
      "url": "http://marc.info/?l=full-disclosure\u0026m=115796646100433\u0026w=2"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Exploit",
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/21849"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch"
      ],
      "url": "http://www.comscripts.com/scripts/php.phprog-album-photo-php.2117.html"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Exploit",
        "Vendor Advisory",
        "URL Repurposed"
      ],
      "url": "http://www.pconfig.com/cdg393/adviso/PHProg.txt"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Exploit"
      ],
      "url": "http://www.securityfocus.com/bid/19957"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28845"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28846"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://marc.info/?l=full-disclosure\u0026m=115796646100433\u0026w=2"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit",
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/21849"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch"
      ],
      "url": "http://www.comscripts.com/scripts/php.phprog-album-photo-php.2117.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit",
        "Vendor Advisory",
        "URL Repurposed"
      ],
      "url": "http://www.pconfig.com/cdg393/adviso/PHProg.txt"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit"
      ],
      "url": "http://www.securityfocus.com/bid/19957"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28845"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28846"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Detection rules are retrieved from Rulezet.