PT-2004-2529 · Ubb · Ubb.Threads

Florian Rock + 1 · Publicado 2004-10-21 · Atualizado 2017-07-11 · CVE-2004-1622

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions UBB.threads versions 3.4.x

Description The issue allows remote attackers to execute arbitrary SQL statements. This is achieved via the Name parameter in the "dosearch.php" endpoint.

Recommendations For UBB.threads versions 3.4.x, update to a version that fixes this issue to prevent the execution of arbitrary SQL statements.

Exploit

Correção

Identificadores relacionados

CVE-2004-1622

Produtos afetados

Ubb.Threads

Referências · 5

• 🔥 https://exploit-db.com/exploits/24698 · Exploit
• 🔥 http://securityfocus.com/bid/11502 · Exploit
• http://marc.info/?l=bugtraq&m=109839925207038&w=2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2004-1622 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17821 · Nota