PT-2004-2849 · Unknown · Advanced Guestbook

Publicado 2004-04-23 · Atualizado 2017-07-11 · CVE-2004-1952

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Advanced Guestbook version 2.2

Description The issue allows remote attackers to execute arbitrary SQL commands and gain privileges via the password.

Recommendations For Advanced Guestbook version 2.2, update to a version that fixes the SQL injection issue to prevent remote attackers from executing arbitrary SQL commands.

Exploit

Correção

Identificadores relacionados

CVE-2004-1952

Produtos afetados

Advanced Guestbook

Referências · 7

• 🔥 http://securityfocus.com/bid/10209 · Exploit
• 🔥 https://exploit-db.com/exploits/24050 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15892 · Nota
• http://marc.info/?l=bugtraq&m=108258046402890&w=2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2004-1952 · Nota de Segurança
• http://archives.neohapsis.com/archives/bugtraq/2005-02/0138.html · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1952 · Nota