PT-2005-1740 · Aztek · Aztek Forum

Publicado 2005-03-07 · Atualizado 2008-09-05 · CVE-2005-0700

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Aztek Forum version 4.0

Description The issue allows remote attackers to obtain database files. This is possibly achieved by setting the ATK ADMIN cookie in the export index action in myadmin.php.

Recommendations For Aztek Forum version 4.0, consider restricting access to the myadmin.php file and the export index action to prevent unauthorized database file access. As a temporary workaround, avoid using the export index action until a patch is available.

Exploit

Correção

Identificadores relacionados

CVE-2005-0700

Produtos afetados

Aztek Forum

Referências · 4

• 🔥 https://exploit-db.com/exploits/860 · Exploit
• 🔥 http://frsirt.com/exploits/20050307.aztek.c.php · Exploit
• http://securityfocus.com/bid/12745 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2005-0700 · Nota de Segurança