PT-2005-2093 · Radbids · Radbids Gold 2

Publicado 2005-04-12 · Atualizado 2017-07-11 · CVE-2005-1074

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions RadBids Gold 2

Description A SQL injection issue exists in index.php, allowing remote attackers to execute arbitrary SQL commands via the mode parameter.

Recommendations For RadBids Gold 2, consider restricting access to the vulnerable index.php file until a patch is available, and avoid using the mode parameter in the affected API endpoint.

Exploit

Correção

Identificadores relacionados

CVE-2005-1074

Produtos afetados

Radbids Gold 2

Referências · 8

• 🔥 http://securityfocus.com/archive/1/395527 · Exploit
• 🔥 https://exploit-db.com/exploits/25370 · Exploit
• 🔥 http://osvdb.org/15429 · Exploit
• 🔥 http://securityfocus.com/bid/13080 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/20040 · Nota
• http://secunia.com/advisories/14906 · Aviso do Fabricante
• http://digitalparadox.org/advisories/rga.txt · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-1074 · Nota de Segurança