PT-2005-1718 · Zorum · Zorum

Publicado 2005-03-07 · Atualizado 2008-09-05 · CVE-2005-0676

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Zorum version 3.5

Description The issue allows remote attackers to trigger an SQL error and possibly inject arbitrary SQL commands via the search capability in index.php.

Recommendations For Zorum version 3.5, consider disabling the search capability until a patch is available to prevent potential SQL injection attacks.

Exploit

Correção

Identificadores relacionados

CVE-2005-0676

Produtos afetados

Zorum

Referências · 2

• 🔥 http://securitytracker.com/id?1013365 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-0676 · Nota de Segurança