PT-2004-2720 · Php Nuke · 4Nalbum

Janek Vind + 1 · Publicado 2004-03-15 · Atualizado 2017-07-11 · CVE-2004-1821

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions 4nalbum versions 0.92 for PHP-Nuke 6.5 through 7.0

Description The issue allows remote attackers to gain privileges or perform unauthorized database operations. This is achieved via the gid parameter.

Recommendations For 4nalbum version 0.92, avoid using the gid parameter in affected API endpoints until the issue is resolved.

Exploit

Correção

Identificadores relacionados

CVE-2004-1821

Produtos afetados

4Nalbum

Referências · 7

• 🔥 https://exploit-db.com/exploits/23816 · Exploit
• http://marc.info/?l=bugtraq&m=107937780222514&w=2 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15498 · Nota
• http://secunia.com/advisories/11134 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2004-1821 · Nota de Segurança
• http://osvdb.org/4294 · Aviso do Fabricante
• http://securityfocus.com/bid/9881 · Aviso do Fabricante