PT-2005-3457 · Openbb · Openbb

Abducter_Minds · Publicado 2005-08-16 · Atualizado 2016-10-18 · CVE-2005-2566

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions OpenBB (affected versions not specified)

Description The issue concerns SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQL commands. This can be achieved via the FID parameter to "board.php" or the UID parameter to "member.php".

Recommendations For all affected versions, consider restricting access to the "board.php" and "member.php" scripts until a patch is available. As a temporary workaround, avoid using the FID parameter in the "board.php" script and the UID parameter in the "member.php" script to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2005-2566

Produtos afetados

Openbb

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2005-2566 · Nota de Segurança
• http://marc.info/?l=bugtraq&m=112351834624072&w=2 · Nota