PT-2005-2507 · Pwsphp · Pwsphp

Froggz · Publicado 2005-05-11 · Atualizado 2017-07-11 · CVE-2005-1511

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions PwsPHP version 1.2.2

Description The issue allows remote attackers to bypass authentication and post arbitrary comments via the Pseudo cookie.

Recommendations For PwsPHP version 1.2.2, consider disabling the use of the Pseudo cookie until a patch is available to prevent authentication bypass and arbitrary comment posting.

Correção

Identificadores relacionados

CVE-2005-1511

Produtos afetados

Pwsphp

Referências · 5

• https://exchange.xforce.ibmcloud.com/vulnerabilities/20503 · Nota
• http://marc.info/?l=bugtraq&m=111565808024581&w=2 · Nota
• http://osvdb.org/16235 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-1511 · Nota de Segurança
• http://secunia.com/advisories/15315 · Nota