PT-2003-1168 · Fudforum · Fudforum

Publicado 2003-03-18 · Atualizado 2008-09-05 · CVE-2002-1421

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions FUDforum versions prior to 2.2.0

Description The issue allows remote attackers to perform unauthorized database operations. This is achieved via specific API endpoints, including "report.php", "selmsg.php", and "showposts.php".

Recommendations For versions prior to 2.2.0, update to version 2.2.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the "report.php", "selmsg.php", and "showposts.php" endpoints until a patch is available.

Exploit

Correção

Identificadores relacionados

CVE-2002-1421

Produtos afetados

Fudforum

Referências · 5

• 🔥 http://online.securityfocus.com/archive/1/288042 · Exploit
• http://securityfocus.com/bid/5500 · Aviso do Fabricante
• http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0082.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-1421 · Nota de Segurança
• http://iss.net/security_center/static/9912.php · Aviso do Fabricante