PT-2004-2938 · E107 · E107

Janek Vind + 1 · Publicado 2004-05-29 · Atualizado 2017-07-11 · CVE-2004-2042

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions e107 version 0.615

Description The issue allows remote attackers to inject arbitrary SQL code and gain sensitive information. This can be achieved via the content parameter to "content.php", the content id parameter to "content.php", or the list parameter to "news.php".

Recommendations For e107 version 0.615, update to a newer version that contains a fix for this issue.

Exploit

Correção

Identificadores relacionados

CVE-2004-2042

Produtos afetados

E107

Referências · 11

• 🔥 http://osvdb.org/6532 · Exploit
• 🔥 http://osvdb.org/6531 · Exploit
• 🔥 http://osvdb.org/6533 · Exploit
• 🔥 http://securityfocus.com/bid/10436 · Exploit
• 🔥 http://waraxe.us/index.php?modname=sa&id=31 · Exploit
• http://secunia.com/advisories/11740 · Aviso do Fabricante
• http://marc.info/?l=full-disclosure&m=108586723116427&w=2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2004-2042 · Nota de Segurança
• http://marc.info/?l=bugtraq&m=108588043007224&w=2 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-2042 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16283 · Nota