PT-2005-2943 · Mcgallery · Mcgallery

D_Bug · Publicado 2005-06-15 · Atualizado 2016-10-18 · CVE-2005-1997

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions McGallery version 1.1

Description The issue allows remote attackers to connect to arbitrary databases or gain sensitive information by triggering an error. This is achieved via a modified host parameter in the show.php file.

Recommendations For McGallery version 1.1, consider restricting access to the show.php file until a patch is available, and avoid using modified host parameters to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2005-1997

Produtos afetados

Mcgallery

Referências · 5

• http://secunia.com/advisories/15727 · Aviso do Fabricante
• http://marc.info/?l=bugtraq&m=111885559100231&w=2 · Nota
• http://osvdb.org/17344 · Nota
• http://securitytracker.com/id?1014215 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-1997 · Nota de Segurança