PT-2005-1886 · Coolforum · Coolforum

Publicado 2005-03-24 · Atualizado 2017-07-11 · CVE-2005-0858

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions CoolForum versions 0.8 and earlier

Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via two different methods: (1) the pseudo parameter to "entete.php" or (2) the login parameter to "register.php".

Recommendations For CoolForum versions 0.8 and earlier, consider disabling the entete.php and register.php scripts until a patch is available to prevent exploitation via the pseudo and login parameters.

Exploit

Correção

Identificadores relacionados

CVE-2005-0858

Produtos afetados

Coolforum

Referências · 6

• 🔥 http://securityfocus.com/bid/12852 · Exploit
• 🔥 https://exploit-db.com/exploits/25240 · Exploit
• 🔥 http://securitytracker.com/id?1013474 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-0858 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19759 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19761 · Nota