PT-2005-2216 · Az · Azbb

James Bercegay · Publicado 2005-04-21 · Atualizado 2017-07-11 · CVE-2005-1200

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions AZ Bulletin Board (AZbb) versions 1.0.07a through 1.0.07c

Description The issue allows remote attackers to execute arbitrary PHP code by modifying the dir src or abs layer parameter to reference a URL on a remote web server that contains the code.

Recommendations For AZ Bulletin Board (AZbb) versions 1.0.07a through 1.0.07c, consider restricting access to the main index.php file until a patch is available. As a temporary workaround, avoid using the dir src and abs layer parameters in the affected file to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2005-1200

Produtos afetados

Azbb

Referências · 7

• 🔥 https://exploit-db.com/exploits/43823 · Exploit
• http://gulftech.org/?node=research&article_id=00068-04192005 · Nota
• http://azbb.cyaccess.com/azbb.php?1091778548 · Correção
• http://marc.info/?l=bugtraq&m=111401838521857&w=2 · Nota
• http://secunia.com/advisories/15013 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2005-1200 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/20181 · Nota