PT-2003-1434 · Bttlxe · Bttlxeforum

Saudi_Defacerz · Publicado 2003-04-26 · Atualizado 2024-02-14 · CVE-2003-0215

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: bttlxeForum versions 2.0 beta 3 and earlier

Description: The issue allows remote attackers to bypass authentication via the username and password fields, and possibly other fields, due to a SQL injection vulnerability.

Recommendations: For versions 2.0 beta 3 and earlier, update to a version later than 2.0 beta 3 to resolve the issue. As a temporary workaround, consider restricting access to the authentication module to minimize the risk of exploitation. Avoid using the username and password fields in a way that could be exploited until the issue is resolved.

Exploit

Correção

Identificadores relacionados

CVE-2003-0215

Produtos afetados

Bttlxeforum

Referências · 5

• 🔥 https://exploit-db.com/exploits/22529 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2003-0215 · Nota de Segurança
• http://securitytracker.com/id?1006632 · Nota
• http://battleaxesoftware.com/forums/forum.asp?forumid=36&select=1812 · Aviso do Fabricante
• http://marc.info/?l=bugtraq&m=105120052725940&w=2 · Nota