PT-2001-2357 · Unknown · Adrotate Pro

Publicado 2001-12-23 · Atualizado 2008-09-05 · CVE-2001-1224

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions AdRotate Pro version 2.0

Description The issue allows remote attackers to modify the database and possibly execute arbitrary commands via a SQL code injection attack in the get input function of adrotate.pm.

Recommendations For AdRotate Pro version 2.0, consider disabling the get input function in adrotate.pm until a patch is available to prevent potential SQL code injection attacks.

Correção

Identificadores relacionados

CVE-2001-1224

Produtos afetados

Adrotate Pro

Referências · 4

• http://securityfocus.com/bid/3739 · Aviso do Fabricante
• http://iss.net/security_center/static/7736.php · Aviso do Fabricante
• http://securityfocus.com/archive/1/246994 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2001-1224 · Nota de Segurança