PT-2005-2409 · Ecomm · Ecomm Professional Guestbook

Publicado 2005-05-03 · Atualizado 2008-09-05 · CVE-2005-1412

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Ecomm Professional Guestbook versions 3.x

Description: The issue allows remote attackers to execute arbitrary SQL commands via the AdminPWD parameter in the verify.asp file.

Recommendations: For Ecomm Professional Guestbook versions 3.x, avoid using the AdminPWD parameter in the verify.asp file until the issue is resolved. Consider temporarily restricting access to the verify.asp file to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2005-1412

Produtos afetados

Ecomm Professional Guestbook

Referências · 4

• 🔥 https://exploit-db.com/exploits/25466 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-1412 · Nota de Segurança
• http://secunia.com/advisories/15190 · Aviso do Fabricante
• http://osvdb.org/15967 · Aviso do Fabricante