Início
Tendências
Vulnerabilidades
Notícias
Pesquisadores
Por que dbugs?

Eek

#36909de 53,632
7.5CVSS total
Vulnerabilidades · 1
PT-2009-1734
7.5
2009-02-24
Ultrastats · Ultrastats · CVE-2008-6260
Name of the Vulnerable Software and Affected Versions: Ultrastats versions 0.2.144 and 0.3.11 Description: The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the `serverid` parameter in the "index.php" file. Recommendations: For Ultrastats version 0.2.144, avoid using the `serverid` parameter in the affected index.php file until the issue is resolved. For Ultrastats version 0.3.11, avoid using the `serverid` parameter in the affected index.php file until the issue is resolved.