PT-2003-1218 · Phpgb · Phpgb

Publicado 2003-03-18 · Atualizado 2008-09-05 · CVE-2002-1482

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions phpGB versions 1.20 and earlier

Description The issue allows remote attackers to gain administrative privileges via SQL code in the password entry, specifically in the login.php file when magic quotes gpc is not enabled.

Recommendations For phpGB versions 1.20 and earlier, consider disabling the login functionality in login.php until a patch is available, and ensure magic quotes gpc is enabled to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2002-1482

Produtos afetados

Phpgb

Referências · 5

• 🔥 http://archives.neohapsis.com/archives/bugtraq/2002-09/0076.html · Exploit
• 🔥 https://exploit-db.com/exploits/21778 · Exploit
• 🔥 http://securityfocus.com/bid/5673 · Exploit
• http://iss.net/security_center/static/10068.php · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2002-1482 · Nota de Segurança