PT-2005-2131 · Unknown · Php Photo Album

Diabolic Crab · Publicado 2005-04-16 · Atualizado 2017-07-11 · CVE-2005-1114

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Photo Album version 2.0.53

Description The issue concerns SQL injection vulnerabilities in the album search.php file. Remote attackers can execute arbitrary SQL commands by manipulating the mode or search parameters.

Recommendations For version 2.0.53, update to a newer version that contains a fix for this issue. As a temporary workaround, consider restricting access to the album search.php file to minimize the risk of exploitation. Avoid using the mode and search parameters in the affected API endpoint until the issue is resolved.

Exploit

Correção

Identificadores relacionados

CVE-2005-1114

Produtos afetados

Php Photo Album

Referências · 7

• 🔥 http://securityfocus.com/bid/13155 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/20086 · Nota
• http://marc.info/?l=bugtraq&m=111343406309969&w=2 · Nota
• http://digitalparadox.org/advisories/phpbbp.txt · Nota
• http://osvdb.org/15931 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1114 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-1114 · Nota de Segurança