PT-2005-3522 · Unknown · Mediabox404

Cedric Tissieres · Publicado 2005-08-20 · Atualizado 2017-07-11 · CVE-2005-2632

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions mediabox404 versions 1.2 and earlier

Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands via the User field in the login admin mediabox404.php file.

Recommendations For mediabox404 versions 1.2 and earlier, consider restricting access to the login admin mediabox404.php file until a fix is available. As a temporary workaround, avoid using the User field in the affected file to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2005-2632

Produtos afetados

Mediabox404

Referências · 5

• http://marc.info/?l=bugtraq&m=112431321513646&w=2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-2632 · Nota de Segurança
• http://securityfocus.com/bid/14593 · Nota
• http://secunia.com/advisories/16493 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/21905 · Nota