PT-2005-4623 · Softbiz · Softbiz Resource Repository Script

Publicado 2005-11-29 · Atualizado 2017-07-20 · CVE-2005-3879

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Softbiz Resource Repository Script versions 1.1 and earlier

Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the sbres id parameter in files such as "details res.php", "refer friend.php", and "report link.php", and the sbcat id parameter in "showcats.php".

Recommendations For Softbiz Resource Repository Script versions 1.1 and earlier, consider restricting access to the vulnerable parameters sbres id and sbcat id until a fix is available. As a temporary workaround, avoid using these parameters in the affected files.

Exploit

Correção

Identificadores relacionados

CVE-2005-3879

Produtos afetados

Softbiz Resource Repository Script

Referências · 14

• 🔥 https://exploit-db.com/exploits/26614 · Exploit
• 🔥 http://securityfocus.com/bid/15585 · Exploit
• 🔥 https://exploit-db.com/exploits/26615 · Exploit
• 🔥 https://exploit-db.com/exploits/26616 · Exploit
• 🔥 https://exploit-db.com/exploits/26613 · Exploit
• 🔥 http://secunia.com/advisories/17555 · Exploit
• http://osvdb.org/21136 · Nota
• http://vupen.com/english/advisories/2005/2617 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/23208 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-3879 · Nota de Segurança
• http://osvdb.org/21133 · Nota
• http://pridels0.blogspot.com/2005/11/softbiz-resource-repository-script-sql.html · Nota
• http://osvdb.org/21135 · Nota
• http://osvdb.org/21134 · Nota