CVE-2006-2890: Medium severity pixelpost pixelpost vulnerability
Pixelpost 1-5rc1-2 and earlier, when registerglobals is enabled, allows remote attackers to gain administrator privileges and conduct other attacks by setting the SESSION["pixelpostadmin"] parameter to 1 in calls to admin scripts such as admin/viewinfo.php.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2006-2890?
CVE-2006-2890 is considered a critical vulnerability due to the potential for unauthorized administrative access.
How do I fix CVE-2006-2890?
To fix CVE-2006-2890, disable register_globals in your PHP configuration and upgrade to the latest version of Pixelpost.
What types of attacks can exploit CVE-2006-2890?
CVE-2006-2890 can be exploited to gain administrator privileges, allowing attackers to modify or delete content.
Which versions of Pixelpost are affected by CVE-2006-2890?
CVE-2006-2890 affects Pixelpost versions 1.5rc1 and earlier.
Is there a known workaround for CVE-2006-2890?
A known workaround for CVE-2006-2890 is to ensure register_globals is disabled on the server.