PT-2005-1405 · Pafiledb · Pafiledb

Devil_Box · Publicado 2005-02-10 · Atualizado 2017-07-11 · CVE-2005-0327

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Pafiledb version 3.1

Description The issue allows remote attackers to execute arbitrary PHP code. This is achieved by modifying the action parameter, which is used in an include statement for login.php.

Recommendations For Pafiledb version 3.1, consider restricting access to the pafiledb.php file until a patch is available, and avoid using the modified action parameter in the include statement for login.php.

Correção

Identificadores relacionados

CVE-2005-0327

Produtos afetados

Pafiledb

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2005-0327 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19176 · Nota
• http://marc.info/?l=bugtraq&m=110720365923818&w=2 · Nota