PT-2005-1763 · Ubb · Ubb.Threads

Kre0N

·

Publicado

2005-03-12

·

Atualizado

2016-10-18

·

CVE-2005-0726

CVSS v2.0

7.5

Alta

VetorAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions UBB.threads version 6.0
Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the Number parameter in the "editpost.php" file.
Recommendations For UBB.threads version 6.0, update the software to a version that includes a fix for this issue, or as a temporary workaround, consider restricting access to the "editpost.php" file to minimize the risk of exploitation. Avoid using the Number parameter in the affected file until the issue is resolved.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

CVE-2005-0726

Produtos afetados

Ubb.Threads