CVE-2006-3531

includes/editor/insert_image.php in Pivot 1.30 RC2 and earlier creates the authentication credentials from parameters, which allows remote attackers to obtain…

published July 12, 2006

CVSS

—

EPSS

10%

Percentile

95.4

In the wild

Unconfirmed

What it is

includes/editor/insert_image.php in Pivot 1.30 RC2 and earlier creates the authentication credentials from parameters, which allows remote attackers to obtain privileges and upload arbitrary files via modified (1) pass and (2) session parameters, and (3) pass and (4) userlevel indices of the (a) Pivot_Vars[] or (b) Users[] array parameters.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.09528 · 95.4th percentile
Published: 2006-07-12T21:00Z

EPSS history

Timeline

12 JUL 21:00Z
includes/editor/insert_image.php in Pivot 1.30 RC2 and earlier creates the authentication credentials from parameters, which allows remote attackers to obtain…
cvelistv5