PT-2005-1676 · Pblang · Pblang

Th3_R@V3N · Publicado 2005-03-01 · Atualizado 2017-07-11 · CVE-2005-0631

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions PBLang version 4.63

Description The issue allows remote authenticated users to delete arbitrary PM files. This is achieved by modifying the id and a parameters in the delpm.php file.

Recommendations For PBLang version 4.63, consider restricting access to the delpm.php file until a patch is available, and avoid using the id and a parameters in this file to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2005-0631

Produtos afetados

Pblang

Referências · 5

• 🔥 http://securityfocus.com/bid/12694 · Exploit
• http://pblforum.drmartinus.de/post.php?cat=2&fid=2&pid=42&page=1 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19552 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-0631 · Nota de Segurança
• http://marc.info/?l=bugtraq&m=110970738214608&w=2 · Nota