PT-2004-2962 · Linpha · Linpha

Fernando Quintero + 1 · Publicado 2004-07-29 · Atualizado 2017-07-11 · CVE-2004-2066

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions LinPHA version 0.9.4

Description The issue allows remote attackers to execute arbitrary SQL code and bypass authentication. This is achieved via the linpha userid or linpha password cookies.

Recommendations For LinPHA version 0.9.4, update to a version that fixes the SQL injection issue to prevent remote attackers from executing arbitrary SQL code and bypassing authentication.

Exploit

Correção

Identificadores relacionados

CVE-2004-2066

Produtos afetados

Linpha

Referências · 6

• 🔥 http://securityfocus.com/bid/10827 · Exploit
• http://osvdb.org/8272 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2004-2066 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16834 · Nota
• http://marc.info/?l=bugtraq&m=109112246805277&w=2 · Nota
• http://secunia.com/advisories/12189 · Aviso do Fabricante