PT-2005-5444 · Sergids · Sergids Top Music

Publicado 2005-12-31 · Atualizado 2008-09-20 · CVE-2005-4781

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions SergiDs Top Music module versions 3.0 PR3 and earlier

Description The issue allows remote attackers to execute arbitrary SQL commands. This is possible via the idartist, idsong, and idalbum parameters to the "modules.php" endpoint.

Recommendations For SergiDs Top Music module versions 3.0 PR3 and earlier, consider restricting access to the vulnerable parameters idartist, idsong, and idalbum in the "modules.php" endpoint until a fix is available.

Exploit

Correção

Identificadores relacionados

CVE-2005-4781

Produtos afetados

Sergids Top Music

Referências · 6

• 🔥 http://securityfocus.com/bid/15581 · Exploit
• 🔥 http://osvdb.org/21397 · Exploit
• 🔥 https://exploit-db.com/exploits/26607 · Exploit
• http://pridels0.blogspot.com/2005_11_27_pridels_archive.html · Nota
• http://sergids.com/topmusic-changelog.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-4781 · Nota de Segurança