Unscored severity · published Sep 9, 2006
CVE-2006-4659
The Panda Platinum Internet Security 2006 10.02.01 and 2007 11.00.00 uses predictable URLs for the spam classification of each message, which allows remote attackers to cause…
–
CVSS
2.1%
EPSS
No
On KEV
Description
The Panda Platinum Internet Security 2006 10.02.01 and 2007 11.00.00 uses predictable URLs for the spam classification of each message, which allows remote attackers to cause Panda to classify arbitrary messages as spam via a web page that contains IMG tags with the predictable URLs. NOTE: this issue could also be regarded as a cross-site request forgery (CSRF) vulnerability.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.1% · higher than 82% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PP
Panda Platinum Internet Security · Panda
2006_10.02.01; 2007_11.00.00 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-4659
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-4659
secunia.com
http://secunia.com/advisories/21769
securityreason.com
http://securityreason.com/securityalert/1524
Vendor Advisory
http://www.security.nnov.ru/advisories/pandais.asp
www.securityfocus.com
http://www.securityfocus.com/archive/1/445479/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/19891
More from Panda Platinum Internet Security
–
CVE-2006-4657
Panda Platinum Internet Security 2006 10.02.01 and 2007 11.00.00 stores service executables under the product's installation directory with weak permissions, which allows local…
–
CVE-2006-4658
Panda Platinum Internet Security 2006 10.02.01 and 2007 11.00.00 uses sequential message numbers in generated URLs that are not filtered if the user replies to a message, which…