PT-2005-1956 · Unknown · Photopost Php Pro

James Bercegay · Publicado 2005-03-29 · Atualizado 2016-10-18 · CVE-2005-0929

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions PhotoPost PHP Pro versions 5.x

Description A SQL injection issue may allow remote attackers to execute arbitrary SQL commands. This can be achieved via the sl parameter to "showmembers.php" or the photo parameter to "showphoto.php".

Recommendations For PhotoPost PHP Pro version 5.x, update to a version that includes a fix for this issue to prevent SQL injection attacks.

Exploit

Correção

Identificadores relacionados

CVE-2005-0929

Produtos afetados

Photopost Php Pro

Referências · 11

• 🔥 https://exploit-db.com/exploits/14453 · Exploit
• 🔥 https://exploit-db.com/exploits/25311 · Exploit
• 🔥 https://exploit-db.com/exploits/25312 · Exploit
• http://osvdb.org/15100 · Nota
• http://osvdb.org/15099 · Nota
• http://marc.info/?l=bugtraq&m=111213719017716&w=2 · Nota
• http://securitytracker.com/id?1013581 · Nota
• http://secunia.com/advisories/14742 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0929 · Nota
• http://marc.info/?l=bugtraq&m=111205342909640&w=2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-0929 · Nota de Segurança