PT-2005-1742 · Phpmyfaq · Phpmyfaq

Publicado 2005-03-07 · Atualizado 2008-09-05 · CVE-2005-0702

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions phpMyFAQ versions 1.4 through 1.5

Description The issue allows remote attackers to add FAQ records to the database via the username field in forum messages, potentially leading to unauthorized data modification.

Recommendations For phpMyFAQ versions 1.4 through 1.5, update to a version that includes a fix for this issue to prevent SQL injection attacks.

Correção

Identificadores relacionados

CVE-2005-0702

Produtos afetados

Phpmyfaq

Referências · 4

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0702 · Nota
• http://phpmyfaq.de/advisory_2005-03-06.php · Aviso do Fabricante
• http://secunia.com/advisories/14516 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2005-0702 · Nota de Segurança