Unrated severityNVD Advisory· Published Jul 12, 2006· Updated Jun 16, 2026
CVE-2006-3531
CVE-2006-3531
Description
includes/editor/insert_image.php in Pivot 1.30 RC2 and earlier creates the authentication credentials from parameters, which allows remote attackers to obtain privileges and upload arbitrary files via modified (1) pass and (2) session parameters, and (3) pass and (4) userlevel indices of the (a) Pivot_Vars[] or (b) Users[] array parameters.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2Patches
Vulnerability mechanics
References
8- retrogod.altervista.org/pivot_130RC2_xpl.htmlnvdExploit
- www.securityfocus.com/bid/18881nvdExploit
- secunia.com/advisories/20962nvdVendor Advisory
- securityreason.com/securityalert/1214nvd
- www.osvdb.org/27126nvd
- www.securityfocus.com/archive/1/439495/100/0/threadednvd
- www.vupen.com/english/advisories/2006/2744nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/27671nvd
News mentions
0No linked articles in our index yet.