CVE-2006-5734: High severity Adaptive Technology Resource Centre Atutor vulnerability
Impact Arbitrary local file inclusion via the $lang property, remotely exploitable if host application passes unfiltered user data into that property. The 3 CVEs listed are applications that used PHPMailer that were vulnerable to this problem.
Patches It's not known exactly when this was fixed in the host applications, but it was fixed in PHPMailer 5.2.0.
Workarounds Filter and validate user-supplied data before use.
References https://nvd.nist.gov/vuln/detail/CVE-2006-5734 https://nvd.nist.gov/vuln/detail/CVE-2007-3215 https://nvd.nist.gov/vuln/detail/CVE-2007-2021 Example exploit: https://www.exploit-db.com/exploits/14893
For more information If you have any questions or comments about this advisory: Open a private issue in the PHPMailer project
Other sources
Multiple PHP remote file inclusion vulnerabilities in ATutor 1.5.3.2 allow remote attackers to execute arbitrary PHP code via a URL in the (1) section parameter in (a) documentation/common/frametoc.php and (b) documentation/common/search.php, the (2) reqlang parameter in documentation/common/search.php and (c) documentation/common/vitals.inc.php, the (3) row[dirname] parameter in (d) include/classes/module/module.class.php, and the (4) langpath parameter in (e) include/classes/phpmailer/class.phpmailer.php. NOTE: the print.php vector is already covered by CVE-2005-3404.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2006-5734?
CVE-2006-5734 is classified as a high-severity vulnerability due to its potential for arbitrary local file inclusion.
How do I fix CVE-2006-5734?
To fix CVE-2006-5734, update PHPMailer to version 5.2.0 or later, or ensure user input is properly sanitized before use.
What applications are affected by CVE-2006-5734?
CVE-2006-5734 affects applications that utilize PHPMailer versions prior to 5.2.0, including Atutor version 1.5.3.2.
What type of attack does CVE-2006-5734 enable?
CVE-2006-5734 enables attackers to perform arbitrary local file inclusion, which can lead to unauthorized access to sensitive files.
Can CVE-2006-5734 be exploited remotely?
Yes, CVE-2006-5734 can be remotely exploited if the host application passes unfiltered user data into the vulnerable $lang property.