PT-2002-1357 · Php+1 · Php+1

Publicado 2002-05-31 · Atualizado 2016-10-18 · CVE-2002-0287

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions pforum versions 1.14 and earlier

Description The issue allows remote attackers to bypass authentication and gain administrator privileges via an SQL injection attack when the PHP server is not configured to use magic quotes by default, due to the lack of explicit enabling of PHP magic quotes.

Recommendations For versions 1.14 and earlier, enable PHP magic quotes to prevent SQL injection attacks.

Correção

Identificadores relacionados

CVE-2002-0287

Produtos afetados

Php

Pforum

Referências · 5

• http://powie.de/news/index.php · Correção
• http://securityfocus.com/bid/4114 · Nota
• http://iss.net/security_center/static/8203.php · Nota
• http://marc.info/?l=bugtraq&m=101389284625019&w=2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-0287 · Nota de Segurança