PT-2005-4206 · Gcards · Gcards

Publicado 2005-11-01 · Atualizado 2017-07-11 · CVE-2005-3408

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions gCards version 1.43

Description A SQL injection issue in the news.php file allows remote attackers to execute arbitrary SQL commands by manipulating the limit parameter.

Recommendations For gCards version 1.43, consider restricting access to the news.php file or avoiding the use of the limit parameter until a fix is available.

Exploit

Correção

Identificadores relacionados

CVE-2005-3408

Produtos afetados

Gcards

Referências · 10

• 🔥 http://securitytracker.com/id?1015106 · Exploit
• 🔥 http://fr33d0m.net/content-1783.html · Exploit
• 🔥 https://exploit-db.com/exploits/26427 · Exploit
• 🔥 http://securityfocus.com/bid/15216 · Exploit
• http://secunia.com/advisories/17353 · Aviso do Fabricante
• http://osvdb.org/20329 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-3408 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3408 · Nota
• http://vupen.com/english/advisories/2005/2223 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/22884 · Nota