CVE-2006-4659

Published: Sep 9, 2006Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The Panda Platinum Internet Security 2006 10.02.01 and 2007 11.00.00 uses predictable URLs for the spam classification of each message, which allows remote attackers to cause Panda to classify arbitrary messages as spam via a web page that contains IMG tags with the predictable URLs. NOTE: this issue could also be regarded as a cross-site request forgery (CSRF) vulnerability.

Affected (2)

Products: Panda: Panda Platinum Internet Security

1 product

Panda Platinum Internet Security

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Panda Panda Platinum Internet Security	Version 2006_10.02.01
Panda Panda Platinum Internet Security	Version 2007_11.00.00

References (10)

http://secunia.com/advisories/21769

Source: cve@mitre.org

http://securityreason.com/securityalert/1524

Source: cve@mitre.org

http://www.security.nnov.ru/advisories/pandais.asp

Source: cve@mitre.org

Vendor Advisory

http://www.securityfocus.com/archive/1/445479/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/19891

Source: cve@mitre.org

http://secunia.com/advisories/21769

Source: af854a3a-2127-422b-91ae-364da2661108

http://securityreason.com/securityalert/1524

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.security.nnov.ru/advisories/pandais.asp

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.securityfocus.com/archive/1/445479/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/19891

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.