PT-2005-4564 · Freeforum · Freeforum

Publicado 2005-11-26 · Atualizado 2011-03-08 · CVE-2005-3816

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions freeForum versions 1.1 and earlier

Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the cat parameter or the thread parameter in thread mode.

Recommendations For freeForum versions 1.1 and earlier, update to a version later than 1.1 to resolve the issue.

Exploit

Correção

Identificadores relacionados

CVE-2005-3816

Produtos afetados

Freeforum

Referências · 8

• 🔥 https://exploit-db.com/exploits/26576 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-3816 · Nota de Segurança
• http://securitytracker.com/id?1015269 · Nota
• http://securityfocus.com/bid/15559 · Nota
• http://pridels0.blogspot.com/2005/11/freeforum-1x-cat-and-thread-sql-inj.html · Nota
• http://osvdb.org/21086 · Nota
• http://secunia.com/advisories/17720 · Aviso do Fabricante
• http://vupen.com/english/advisories/2005/2571 · Nota