PT-2005-2591 · Openbb · Openbb

Megasky · Publicado 2005-05-16 · Atualizado 2016-10-18 · CVE-2005-1612

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions OpenBB version 1.0.8

Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. The issue is exploited via the TID parameter in the "read.php" file.

Recommendations For OpenBB version 1.0.8, avoid using the TID parameter in the read.php file until a fix is available. Consider restricting access to the read.php file to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2005-1612

Produtos afetados

Openbb

Referências · 4

• 🔥 http://securityfocus.com/bid/13624 · Exploit
• 🔥 https://exploit-db.com/exploits/25656 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-1612 · Nota de Segurança
• http://marc.info/?l=bugtraq&m=111601780332632&w=2 · Nota