PT-2003-2084 · Unknown · Knowledgebuilder

Dominus_Vis · Publicado 2003-12-31 · Atualizado 2017-07-11 · CVE-2003-1131

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions KnowledgeBuilder (affected versions not specified)

Description The issue allows remote attackers to execute arbitrary PHP code by modifying the page parameter in index.php to reference a URL on a remote web server that contains the code. This can be done by accessing the /index.php endpoint and manipulating the page variable to point to a malicious PHP script hosted on a different server.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2003-1131

Produtos afetados

Knowledgebuilder

Referências · 8

• 🔥 https://exploit-db.com/exploits/23476 · Exploit
• 🔥 http://securityfocus.com/bid/9292 · Exploit
• 🔥 http://securityfocus.com/archive/1/348359 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/14078 · Nota
• http://marc.info/?l=bugtraq&m=111066494323543&w=2 · Nota
• http://osvdb.org/3228 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2003-1131 · Nota de Segurança
• http://secunia.com/advisories/10504 · Aviso do Fabricante