Description

mainfile.php in XOOPS 2.0.13.2 and earlier, when register_globals is enabled, allows remote attackers to overwrite variables such as $xoopsOption['nocommon'] and conduct directory traversal attacks or include PHP files via (1) xoopsConfig[language] to misc.php or (2) xoopsConfig[theme_set] to index.php, as demonstrated by injecting PHP sequences into a log file.

Remediation

References

CVE-2006-2516

Related Vulnerabilities

MySQL CVE-2019-2774 Vulnerability (CVE-2019-2774)

Collabtive Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-3247)

WordPress Plugin Facebook for WordPress Cross-Site Request Forgery (3.0.3)

WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-8834)

WordPress Plugin Akismet Cross-Site Scripting (3.1.4)

Severity

Medium

Classification

CVE-2006-2516 CWE-22

Tags

Missing Update Known Vulnerabilities