PT-2005-4873 · Efiction · Efiction

Rgod · Publicado 2005-12-11 · Atualizado 2008-09-05 · CVE-2005-4174

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions eFiction versions 1.0 through 2.0

Description The issue might allow remote attackers to conduct unauthorized operations. This can be achieved by directly accessing certain scripts, specifically "install.php" or "upgrade.php". It is unclear whether this is due to a vulnerability in eFiction itself or the result of incorrect system administration practices.

Recommendations For versions 1.0 through 2.0, consider removing or restricting access to the "install.php" and "upgrade.php" scripts to prevent unauthorized operations. As a temporary workaround, restrict access to these scripts until it is determined whether the issue is due to a vulnerability in eFiction or incorrect system administration practices.

Exploit

Correção

Identificadores relacionados

CVE-2005-4174

Produtos afetados

Efiction

Referências · 8

• 🔥 http://archives.neohapsis.com/archives/bugtraq/2005-11/0301.html · Exploit
• 🔥 http://rgod.altervista.org/efiction2_xpl.html · Exploit
• 🔥 http://securitytracker.com/id?1015273 · Exploit
• 🔥 http://securityfocus.com/bid/15568 · Exploit
• http://securityreason.com/securityalert/206 · Nota
• http://efiction.wallflowergirl.com/forums/viewtopic.php?t=1555 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-4174 · Nota de Segurança
• http://secunia.com/advisories/17777 · Aviso do Fabricante