PT-2005-2946 · Pafiledb · Pafiledb

Publicado 2005-06-15 · Atualizado 2016-10-18 · CVE-2005-2000

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions paFileDB versions 3.1 and earlier

Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via several parameters, including the formname parameter in the login form, the formname parameter in the team login form, or to auth.php. Additionally, the select, id, or query parameter to pafiledb.php, or the string parameter to search.php can be exploited.

Recommendations For paFileDB versions 3.1 and earlier, update to a version later than 3.1 to resolve the issue. As a temporary workaround, consider restricting access to the vulnerable parameters, such as formname, select, id, query, and string, until a patch is available. Avoid using the vulnerable parameters in the affected API endpoints, such as the login form, team login form, auth.php, pafiledb.php, and search.php, until the issue is resolved.

Exploit

Correção

Identificadores relacionados

CVE-2005-2000

Produtos afetados

Pafiledb

Referências · 6

• 🔥 https://exploit-db.com/exploits/1050 · Exploit
• 🔥 http://gulftech.org/?node=research&article_id=00082-06142005 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-2000 · Nota de Segurança
• http://marc.info/?l=bugtraq&m=111885787217807&w=2 · Nota
• http://phparena.net · Correção
• http://phparena.net/pafiledb_patch · Correção