PT-2005-5270 · Mybb · Mybb

Addmimistrator · Publicado 2005-12-31 · Atualizado 2018-10-19 · CVE-2005-4602

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions MyBB versions prior to 1.0.1

Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by manipulating the file extension of an uploaded file attachment in the inc/function upload.php file.

Recommendations For versions prior to 1.0.1, update to version 1.0.1 or later to resolve the issue. As a temporary workaround, consider restricting file uploads or validating the file extensions to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2005-4602

Produtos afetados

Mybb

Referências · 7

• http://vupen.com/english/advisories/2006/0012 · Nota
• http://osvdb.org/22159 · Nota
• http://securityreason.com/securityalert/311 · Nota
• http://securityfocus.com/bid/16097 · Nota
• http://secunia.com/advisories/18281 · Nota
• http://securityfocus.com/archive/1/420573/100/0/threaded · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-4602 · Nota de Segurança